# changelog

author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2153097


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.2.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2153097


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-2
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2153097


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2147476


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236592


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12226
  - Resolves: RHEL-13662
  - Resolves: RHEL-13673
  - Resolves: RHEL-13683
  - Resolves: RHEL-13648
  - Resolves: RHEL-13651


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-1
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186804
  - Resolves: rhbz#2186811
  - Resolves: rhbz#2186807


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20995


author: Petra Alice Mikova <pmikova@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to ea version of jdk18
  - Add new slave jwebserver and corresponding manpage
  - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
  - Related: rhbz#2192748


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to jdk-18.0.2 release
  - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory
  - Rebase FIPS patches from fips-18u branch
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here
  - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21
  - Disable tzdata tests until we are on the latest JDK and things are back in sync
  - Use empty nss.fips.cfg until it is again available via the FIPS patch
  - Related: rhbz#2192748


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-1
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Rebase FIPS patches from fips-19u branch
  - Remove references to sample directory removed by JDK-8284999
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
  - Related: rhbz#2192748


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: rhbz#2192748


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: rhbz#2192748


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: rhbz#2192748


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: rhbz#2192748


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: rhbz#2192748


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-1
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Rebase FIPS patches from fips-19u branch
  - Remove references to sample directory removed by JDK-8284999
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
  - Related: RHEL-12997


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12997


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Sync the copy of the portable specfile with the latest update
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Synchronise runtime and buildtime tzdata requirements
  - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
  - Add missing jfr, jpackage and jwebserver alternative ghosts
  - Move jcmd to the headless package
  - Revert alt-java binary location to being within the JDK tree
  - Resolves: RHEL-12997
  - Resolves: RHEL-14954
  - Resolves: RHEL-14962
  - Resolves: RHEL-14958
  - Related: RHEL-14946
  - Resolves: RHEL-14959
  - Resolves: RHEL-14948


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16386


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20998


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-159.el9]
changelog:
  - mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() (Jose Ignacio Tornos Martinez) [2103595]
  - wifi: mac80211: consider EHT element size in assoc request (Jose Ignacio Tornos Martinez) [2103595]
  - wifi: mac80211: switch airtime fairness back to deficit round-robin scheduling (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7615: fix throughput regression on DFS channels (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921: enlarge maximum VHT MPDU length to 11454 (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921: fix aggregation subframes setting to HE max (Jose Ignacio Tornos Martinez) [2103595]
  - wifi: mac80211_hwsim: set virtio device ready in probe() (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921s: fix possible sdio deadlock in command fail (Jose Ignacio Tornos Martinez) [2103595]
  - wifi: rtw89: 8852a: rfk: fix div 0 exception (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921: do not update pm states in case of error (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7615: do not update pm stats in case of error (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: Avoid REO CMD failed prints during firmware recovery (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: Fix incorrect debug_mask mappings (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: fix missing skb drop on htc_tx_completion error (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921s: fix firmware download random fail (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: fix IRQ affinity warning on shutdown (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: fix netdev open race (Jose Ignacio Tornos Martinez) [2103595]
  - iwlwifi: fw: init SAR GEO table only if data is present (Jose Ignacio Tornos Martinez) [2103595]
  - ath10k: htt_tx: do not interpret Eth frames as WiFi (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: Don't check arvif->is_started before sending management frames (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: reset 11d state in process of recovery (Jose Ignacio Tornos Martinez) [2103595]
  - brcmfmac: use ISO3166 country code and 0 rev as fallback on brcmfmac43602 chips (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: fix tx status related use-after-free race on station removal (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: do not attempt to reorder received 802.3 packets without agg session (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921: fix kernel crash at mt7921_pci_remove (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: fix antenna config missing in 6G cap (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (Jose Ignacio Tornos Martinez) [2103595]
  - ath10k: enable napi on RX path for usb (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: fix the warning of dev_wake in mhi_pm_disable_transition() (Jose Ignacio Tornos Martinez) [2103595]
  - ath11k: acquire ab->base_lock in unassign when finding the peer by addr (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: fix unbounded shift in mt7915_mcu_beacon_mbss (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7915: fix DBDC default band selection on MT7915D (Jose Ignacio Tornos Martinez) [2103595]
  - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (Jose Ignacio Tornos Martinez) [2103595]
  - crypto: testmgr - disallow plain cbcmac(aes) and ghash in FIPS mode (Vladis Dronov) [2107596]
  - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov) [2107596]
  - crypto: api - allow algs only in specific constructions in FIPS mode (Vladis Dronov) [2107596]
  - i2c: qcom-geni: Fix GPI DMA buffer sync-back (Andrew Halaney) [2105390]
  - i2c: qcom-geni: Use the correct return value (Andrew Halaney) [2105390]
  - i2c: qcom-geni: Propagate GENI_ABORT_DONE to geni_i2c_abort_xfer() (Andrew Halaney) [2105390]
  - i2c: qcom-geni: remove unnecessary conditions (Andrew Halaney) [2105390]
  - i2c: qcom-geni: Use dev_err_probe() for GPI DMA error (Andrew Halaney) [2105390]
  - i2c: qcom-geni: Add support for GPI DMA (Andrew Halaney) [2105390]
  - soc: qcom: geni: Make use of the helper function devm_platform_ioremap_resource() (Andrew Halaney) [2105390]
  - soc: qcom: geni: move GENI_IF_DISABLE_RO to common header (Andrew Halaney) [2105390]
  - soc: qcom: geni: Add support for gpi dma (Andrew Halaney) [2105390]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-160.el9]
changelog:
  - iavf: Fix VLAN_V2 addition/rejection (Ivan Vecera) [2119701]
  - gve: Recording rx queue before sending to napi (Jordan Kimbrough) [2022916]
  - gve: fix the wrong AdminQ buffer queue index check (Jordan Kimbrough) [2022916]
  - gve: Fix GFP flags when allocing pages (Jordan Kimbrough) [2022916]
  - gve: Add tx|rx-coalesce-usec for DQO (Jordan Kimbrough) [2022916]
  - gve: Add consumed counts to ethtool stats (Jordan Kimbrough) [2022916]
  - gve: Implement suspend/resume/shutdown (Jordan Kimbrough) [2022916]
  - gve: Add optional metadata descriptor type GVE_TXD_MTD (Jordan Kimbrough) [2022916]
  - gve: remove memory barrier around seqno (Jordan Kimbrough) [2022916]
  - gve: Update gve_free_queue_page_list signature (Jordan Kimbrough) [2022916]
  - gve: Move the irq db indexes out of the ntfy block struct (Jordan Kimbrough) [2022916]
  - gve: Correct order of processing device options (Jordan Kimbrough) [2022916]
  - gve: fix for null pointer dereference. (Jordan Kimbrough) [2022916]
  - gve: fix unmatched u64_stats_update_end() (Jordan Kimbrough) [2022916]
  - gve: Fix off by one in gve_tx_timeout() (Jordan Kimbrough) [2022916]
  - gve: Add a jumbo-frame device option. (Jordan Kimbrough) [2022916]
  - gve: Implement packet continuation for RX. (Jordan Kimbrough) [2022916]
  - gve: Add RX context. (Jordan Kimbrough) [2022916]
  - gve: Track RX buffer allocation failures (Jordan Kimbrough) [2022916]
  - gve: Allow pageflips on larger pages (Jordan Kimbrough) [2022916]
  - gve: Add netif_set_xps_queue call (Jordan Kimbrough) [2022916]
  - gve: Recover from queue stall due to missed IRQ (Jordan Kimbrough) [2022916]
  - gve: Do lazy cleanup in TX path (Jordan Kimbrough) [2022916]
  - gve: Add rx buffer pagecnt bias (Jordan Kimbrough) [2022916]
  - gve: Switch to use napi_complete_done (Jordan Kimbrough) [2022916]
  - gve: report 64bit tx_bytes counter from gve_handle_report_stats() (Jordan Kimbrough) [2022916]
  - gve: fix gve_get_stats() (Jordan Kimbrough) [2022916]
  - gve: Properly handle errors in gve_assign_qpl (Jordan Kimbrough) [2022916]
  - gve: Avoid freeing NULL pointer (Jordan Kimbrough) [2022916]
  - gve: Correct available tx qpl check (Jordan Kimbrough) [2022916]
  - gve: Use kvcalloc() instead of kvzalloc() (Jordan Kimbrough) [2022916]
  - gve: DQO: avoid unused variable warnings (Jordan Kimbrough) [2022916]
  - gve: fix the wrong AdminQ buffer overflow check (Jordan Kimbrough) [2022916]
  - ath9k: htc: clean up statistics macros (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - ath9k: hif_usb: simplify if-if to if-else (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - net: qcom/emac: Fix improper merge resolution in device_get_mac_address (Patrick Talbert) [2108539]
  - x86/speculation: Add LFENCE to RSB fill sequence (Waiman Long) [2115086] {CVE-2022-26373}
  - x86/speculation: Add RSB VM Exit protections (Waiman Long) [2115086] {CVE-2022-26373}
  - tools headers cpufeatures: Sync with the kernel sources (Waiman Long) [2115086]
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Waiman Long) [2115086]
  - lkdtm: Disable return thunks in rodata.c (Waiman Long) [2115086]
  - x86/amd: Use IBPB for firmware calls (Waiman Long) [2115086]
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (Waiman Long) [2115086]
  - x86/alternative: Report missing return thunk details (Waiman Long) [2115086]
  - nvme-fc: restart admin queue if the caller needs to restart queue (Ewan D. Milne) [2104461]
  - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Rahul Lakkireddy) [2109526]
  - scsi: csiostor: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Rahul Lakkireddy) [2109526]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-161.el9]
changelog:
  - x86/ftrace: Use alternative RET encoding (Joe Lawrence) [2121368]
  - x86/ibt,ftrace: Make function-graph play nice (Joe Lawrence) [2121368]
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Joe Lawrence) [2121368]
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Joe Lawrence) [2121368]
  - redhat: remove GL_DISTGIT_USER, RHDISTGIT and unify dist-git cloning (Frantisek Hrbata)
  - random: allow reseeding DRBG with getrandom (Daiki Ueno) [2114854]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.el9]
changelog:
  - Revert "ixgbevf: Mailbox improvements" (Ken Cox) [2120548]
  - Revert "ixgbevf: Add support for new mailbox communication between PF and VF" (Ken Cox) [2120548]
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Wander Lairson Costa) [2116968] {CVE-2022-2585}
  - fix race between exit_itimers() and /proc/pid/timers (Wander Lairson Costa) [2116968] {CVE-2022-2585}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.1.1.el9]
changelog:
  - drm/amdgpu: Only disable prefer_shadow on hawaii (Lyude Paul) [2120670]
  - i40e: Fix kernel crash during module removal (Ivan Vecera) [2070375]
  - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca) [2118139]
  - redhat: enable zstream release numbering for rhel 9.1 (Patrick Talbert)
  - redhat: add missing CVE reference to latest changelog entries (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.2.1.el9]
changelog:
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Ken Cox) [2109871]
  - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (Vitaly Kuznetsov) [2030922]
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul) [2122068]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.3.1.el9]
changelog:
  - scsi: restore setting of scmd->scsi_done() in EH and reset ioctl paths (Ewan D. Milne) [2120469]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Terry Bowman) [2124644]
  - ice: Allow operation with reduced device MSI-X (Petr Oros) [2107719]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.4.1.el9]
changelog:
  - iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2096128]
  - configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2126153]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.5.1.el9_1]
changelog:
  - redhat: change default dist suffix for RHEL 9.1 (Patrick Talbert)
  - netfilter: nf_tables: clean up hook list when offload flags check fails (Florian Westphal) [2121393]
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Florian Westphal) [2121393]
  - netfilter: nf_conntrack_irc: Fix forged IP logic (Florian Westphal) [2121393]
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (Florian Westphal) [2121393]
  - netfilter: br_netfilter: Drop dst references before setting. (Florian Westphal) [2121393]
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Florian Westphal) [2121393]
  - netfilter: flowtable: add function to invoke garbage collection immediately (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow binding to already bound chain (Florian Westphal) [2121393]
  - netfilter: nft_tunnel: restrict it to netdev family (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow updates of implicit chain (Florian Westphal) [2121393]
  - netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal) [2121393]
  - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal) [2121393]
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (Florian Westphal) [2121393]
  - netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags (Florian Westphal) [2121393]
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Florian Westphal) [2121393]
  - netfilter: nf_tables: possible module reference underflow in error path (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (Florian Westphal) [2121393]
  - netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access (Florian Westphal) [2121393]
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow jump to implicit chain from set element (Florian Westphal) [2121393]
  - netfilter: nfnetlink: re-enable conntrack expectation events (Florian Westphal) [2121393]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.6.1.el9_1]
changelog:
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol system_freezing_cnt to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol revert_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol printk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_to_xattr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_from_xattr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol override_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kmalloc_order_trace to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol flush_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol del_timer_sync to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpumask_next to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol congestion_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol complete_and_exit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol clear_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_cred to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __preempt_count to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [2120286]
  - kabi: re-enable build-time kabi-checks (Čestmír Kalina) [2120321]
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2129287]
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2129287]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.8.1.el9_0]
changelog:
  - KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Bandan Das) [2033070]
  - iommu/amd: Fix I/O page table memory leak (Jerry Snitselaar) [2053219]
  - iommu/amd: Recover from event log overflow (Jerry Snitselaar) [2053219]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.9.1.el9_0]
changelog:
  - NFS: Don't loop forever in nfs_do_recoalesce() (Steve Dickson) [2069274]
  - perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069686]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.10.1.el9_0]
changelog:
  - CI: Remove deprecated option (Veronika Kabatova)
  - scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069973]
  - scsi: iscsi: Merge suspend fields (Chris Leech) [2069973]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069973]
  - scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069973]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.11.1.el9_0]
changelog:
  - myri10ge: mark as unmaintained (Michal Schmidt) [2054208]
  - benet: mark device 0xe220 (Lancer) as unmaintained (Michal Schmidt) [2054208]
  - bnx2: mark as unmaintained (Michal Schmidt) [2054208]
  - ice: Fix race condition during interface enslave (Petr Oros) [1988953]
  - ice: Fix error with handling of bonding MTU (Petr Oros) [1988953]
  - ice: Avoid RTNL lock when re-creating auxiliary device (Petr Oros) [1988953]
  - ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Petr Oros) [1988953]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.12.1.el9_0]
changelog:
  - redhat/configs: Enable WDT devices used by qemu VMs (Prarit Bhargava) [2074160]
  - redhat/configs: disable CONFIG_CAN_SOFTING (Brian Masney) [2073521]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.13.1.el9_0]
changelog:
  - redhat: disable uncommon media device infrastructure (Jarod Wilson) [2074598]
  - netfilter: nf_tables: unregister flowtable hooks on netns exit (Florian Westphal) [2056869]
  - netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056869] {CVE-2022-25636}
  - netfilter: nf_tables: validate registers coming from userspace. (Phil Sutter) [2065350] {CVE-2022-1015}
  - scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071524]
  - scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071524]
  - scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071524]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071524]
  - Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071524]
  - scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071524]
  - scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071524]
  - scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Chris Leech) [2071524]
  - scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071524]
  - scsi: iscsi: Fix set_param() handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix iscsi_task use after free (Chris Leech) [2071524]
  - scsi: iscsi: Adjust iface sysfs attr detection (Chris Leech) [2071524]
  - scsi: qedi: Add support for fastpath doorbell recovery (Chris Leech) [2071524]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.14.1.el9_0]
changelog:
  - PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074830 2068432]
  - Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074830 2068432]
  - redhat: rpminspect: disable 'patches' check for known empty patch files (Herton R. Krzesinski)
  - redhat/configs: make SHA512_arch algos and CRYPTO_USER built-ins (Vladis Dronov) [2072643 2070624]
  - CI: Drop baseline runs (Veronika Kabatova)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.15.1.el9_0]
changelog:
  - CI: Use zstream builder image (Veronika Kabatova)
  - tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: add small random increments to the source port (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2085480 2061850]
  - Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2085480 2061850]
  - redhat/koji/Makefile: Decouple koji Makefile from Makefile.common (Andrea Claudi)
  - redhat: fix make {distg-brew,distg-koji} (Andrea Claudi)
  - esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2082950 2082951] {CVE-2022-27666}
  - esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2082950 2082951] {CVE-2022-27666}
  - sctp: use the correct skb for security_sctp_assoc_request (Ondrej Mosnacek) [2084044 2078856]
  - security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2084044 2078856]
  - security: add sctp_assoc_established hook (Ondrej Mosnacek) [2084044 2078856]
  - security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2084044 2078856]
  - security: pass asoc to sctp_assoc_request and sctp_sk_clone (Ondrej Mosnacek) [2084044 2078856]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.16.1.el9_0]
changelog:
  - dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082187 2081778]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.17.1.el9_0]
changelog:
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092994 2092995] {CVE-2022-1966}
  - thunderx nic: mark device as unmaintained (Íñigo Huguet) [2092638 2060285]
  - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (Steve Best) [2092255 2067770]
  - perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087963 2087964] {CVE-2022-1729}
  - spec: Fix separate tools build (Jiri Olsa) [2090852 2054579]
  - mm: lru_cache_disable: replace work queue synchronization with synchronize_rcu (Marcelo Tosatti) [2086963 2033500]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.15.1.el9_3]
changelog:
  - drm/mgag200: Flush the cache to improve latency (Jocelyn Falempe) [RHEL-16560 RHEL-16556]
  - sched/fair: Make the BW replenish timer expire in hardirq context for PREEMPT_RT (Valentin Schneider) [RHEL-16842 RHEL-7232]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.16.1.el9_3]
changelog:
  - tracing/timerlat: Add user-space interface (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/osnoise: Skip running osnoise if all instances are off (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/timerlat: Always wakeup the timerlat thread (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep() (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/osnoise: Fix notify new tracing_max_latency (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/timerlat: Notify new max thread latency (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/osnoise: set several trace_osnoise.c variables storage-class-specifier to static (John Kacur) [RHEL-18356 RHEL-16305]
  - trace/osnoise: make use of the helper function kthread_run_on_cpu() (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing: Switch to kvfree_rcu() API (John Kacur) [RHEL-18356 RHEL-16305]
  - rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() (Waiman Long) [RHEL-18356 RHEL-16305]
  - x86/sev: Check for user-space IOIO pointing to kernel space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - hwmon: (ina3221) Add support for channel summation disable (Steve Best) [RHEL-17898 RHEL-1899]
  - ice: reset first in crash dump kernels (Petr Oros) [RHEL-17613 RHEL-15698]
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) [RHEL-17571 2229975]
  - net: fix net device address assign type (Michal Schmidt) [RHEL-17279 RHEL-6368]
  - net: add check for current MAC address in dev_set_mac_address (Michal Schmidt) [RHEL-17279 RHEL-6368]
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Keep a gem reference to user bos in surfaces (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: fix typo of sizeof argument (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix possible invalid drm gem put calls (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix shader stage validation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: remove unused vmw_overlay function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Print errors when running on broken/unsupported configs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Drop mksstat_init_record fn as currently unused (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix src/dst_pitch confusion (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Replace one-element array with flexible-array member (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Do not drop the reference to the handle too soon (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Stop accessing buffer objects which failed init (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Make the driver work without the dummy resources (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Stop using raw ttm_buffer_object's (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Abstract placement selection (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Rename dummy to is_iomem (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Cleanup the vmw bo usage in the cursor paths (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Simplify fb pinning (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Rename vmw_buffer_object to vmw_bo (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Remove the duplicate bo_free function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Use the common gem mmap instead of the custom code (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/radeon: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/qxl: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/gem-vram: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: prevent moving of pinned BOs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: stop allocating a dummy resource for pipelined gutting (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: stop allocating dummy resources during BO creation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: clear the ttm_tt when bo->resource is NULL (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/i915/ttm: audit remaining bo->resource (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Stop accessing buffer objects which failed init" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Do not drop the reference to the handle too soon" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Fix Legacy Display Unit atomic drm support" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.17.1.el9_3]
changelog:
  - netfilter: nf_tables: skip bound chain on rule flush (Florian Westphal) [RHEL-10111 RHEL-10113 RHEL-10112 RHEL-10114] {CVE-2023-3777}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Michal Schmidt) [RHEL-18553 RHEL-18968 RHEL-6654 RHEL-7239] {CVE-2022-41858}
  - RDMA/core: Update CMA destination address on rdma_resolve_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-17263 RHEL-17265 RHEL-17264 RHEL-17266] {CVE-2023-4622}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.18.1.el9_3]
changelog:
  - nfp: fix use-after-free in area_cache_get() (Ricardo Robaina) [RHEL-19456 RHEL-19536 RHEL-6566 RHEL-7241] {CVE-2022-3545}
  - rtla: Fix uninitialized variable found (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat: Do not stop user-space if a cpu is offline (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Fix previous IRQ delay for IRQs that happens after thread sample (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Fix negative IRQ delay (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Zero thread sum after every sample analysis (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_hist: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_top: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/hwnoise: Reduce runtime to 75% (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Start the tracers after creating all instances (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_hist: Add auto-analysis support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat: Give timerlat auto analysis its own instance (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Automatically move rtla to a house-keeping cpu (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Change monitored_cpus from char * to cpu_set_t (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Add --house-keeping option (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Add -C cgroup support (John Kacur) [RHEL-18360 RHEL-10079]
  - ata: ahci: Add Intel Alder Lake-P AHCI controller to low power chipsets list (Tomas Henzl) [RHEL-19394 RHEL-10941]
  - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
  - fbcon: Fix error paths in set_con2fb_map (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ricardo Robaina) [RHEL-12495 RHEL-12496 RHEL-7186 RHEL-7264] {CVE-2023-3812}
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Florian Westphal) [RHEL-10536 RHEL-10538 RHEL-10537 RHEL-10539] {CVE-2023-4015}
  - md: Put the right device in md_seq_next (Nigel Croxon) [RHEL-16363 RHEL-12455]
  - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
  - dpll: Fix potential msg memleak when genlmsg_put_reply failed (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Bastien Nocera) [RHEL-19003 RHEL-2717] {CVE-2023-40283}
  - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-16129 RHEL-11592]
  - tcp: adjust rcv_ssthresh according to sk_reserved_mem (Felix Maurer) [RHEL-16129 RHEL-11592]
  - md: raid0: account for split bio in iostat accounting (Nigel Croxon) [RHEL-4082 RHEL-2718]
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Ricardo Robaina) [RHEL-19465 RHEL-19526 RHEL-6428 RHEL-7052] {CVE-2023-2166}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.19.1.el9_3]
changelog:
  - redhat: fix kernel changelog entry for RHEL-16560 (Jan Stancek)
  - perf/core: Fix potential NULL deref (Wander Lairson Costa) [RHEL-18087 RHEL-18088 RHEL-14984 RHEL-14985] {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads (Wander Lairson Costa) [RHEL-18087 RHEL-18088 RHEL-14984 RHEL-14985] {CVE-2023-5717}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.20.1.el9_3]
changelog:
  - s390/dasd: print copy pair message only for the correct error (Tobias Huschle) [RHEL-11980 RHEL-2833]
  - x86/microcode/AMD: Rip out static buffers (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Load late on both threads too (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/amd: Remove unneeded pointer arithmetic (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Get rid of __find_equiv_id() (David Arcari) [RHEL-14590 RHEL-10030]
  - docs: move x86 documentation into Documentation/arch/ (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Handle multiple glued containers properly (David Arcari) [RHEL-14590 RHEL-10030]
  - mm: Fix copy_from_user_nofault(). (Waiman Long) [RHEL-18946 RHEL-18440]
  - redhat: rewrite genlog and support Y- tags (Jan Stancek)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.21.1.el9_3]
changelog:
  - x86/microcode: do not cache microcode if it will not be used (Paolo Bonzini) [RHEL-21567 RHEL-16225]
  - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Remove hv_isolation_type_en_snp (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Introduce a global variable hyperv_paravisor_present (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Support fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Support hypercalls for fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add smp support for SEV-SNP guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add VTL specific structs and hypercalls (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Set Virtual Trust Level in VMBus init message (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add sev-snp enlightened guest static key (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Expand __tdx_hypercall() to handle more arguments (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Add more registers to struct tdx_hypercall_args (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Fix typo in comment in __tdx_hypercall() (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - blk-mq: don't count completed flush data request as inflight in case of quiesce (Ming Lei) [RHEL-19105 RHEL-18054]
  - NFS: Use parent's objective cred in nfs_access_login_time() (Jay Shin) [RHEL-22147 RHEL-16024]
  - s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Tobias Huschle) [RHEL-17887 RHEL-2412]
  - smb: client: fix potential OOB in smb2_dump_detail() (Scott Mayhew) [RHEL-19146 RHEL-21679 RHEL-19147 RHEL-21677] {CVE-2023-6610}
  - smb: client: fix potential OOB in cifs_dump_detail() (Scott Mayhew) [RHEL-19146 RHEL-21679 RHEL-19147 RHEL-21677] {CVE-2023-6610}
  - x86/sev: Do not handle #VC for DR7 read/write (Paolo Bonzini) [RHEL-21885 RHEL-15069]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Paolo Bonzini) [RHEL-21885 RHEL-15069]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.22.1.el9_3]
changelog:
  - usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope (Desnes Nunes) [RHEL-21838 RHEL-14573]
  - KVM: SVM: Do not use user return MSR support for virtualized TSC_AUX (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - KVM: SVM: Fix TSC_AUX virtualization setup (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - net: tls, update curr on splice as well (Sabrina Dubroca) [RHEL-22094 RHEL-22097 RHEL-19066 RHEL-19067] {CVE-2024-0646}
  - smb: client: fix OOB in smbCalcSize() (Scott Mayhew) [RHEL-21664 RHEL-21669 RHEL-18992 RHEL-18993] {CVE-2023-6606}
  - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: fix zero value filehandle in post open getattr (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: fix pnfs MDS=DS session trunking (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - ice: dpll: fix phase offset value (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: netlink/core: change pin frequency set behavior (Petr Oros) [RHEL-17652 RHEL-15789]
  - ice: dpll: implement phase related callbacks (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: netlink/core: add support for pin-dpll signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: spec: add support for pin-dpll signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: docs: add support for pin signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - netlink: specs: remove redundant type keys from attributes in subsets (Petr Oros) [RHEL-17652 RHEL-15789]
  - md/raid6: use valid sector values to determine if an I/O should wait on the reshape (Nigel Croxon) [RHEL-20933 RHEL-17276]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.23.1.el9_3]
changelog:
  - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (Jerry Snitselaar) [RHEL-19382 RHEL-11590]
  - arm64/smmu: use TLBI ASID when invalidating entire range (Jerry Snitselaar) [RHEL-19382 RHEL-11590]
  - netfilter: nft_set_pipapo: skip inactive elements during set walk (Florian Westphal) [RHEL-20701 RHEL-20709 RHEL-19722 RHEL-19961] {CVE-2023-6817}
  - netfilter: nf_tables: split async and sync catchall in two functions (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: remove catchall element in GC sync path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: set backend .flush always succeeds (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: work around newrule after chain binding (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix memleak when more than 255 elements expired (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disable toggling dormant table state more than once (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow element removal on anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow rule removal from chain binding (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix out of memory error handling (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: use correct lock to protect gc_list (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction race with abort path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: flush pending destroy work before netlink notifier (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_dynset: disallow object maps (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction race with netns dismantle (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: don't fail inserts if duplicate has expired (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: deactivate catchall elements in next generation (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix kdoc warnings after gc rework (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix false-positive lockdep splat (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: remove busy mark and gc batch API (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nf_tables: adapt set backend to use GC transaction API (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction API to avoid race with control plane (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: skip bound chain in netns release path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: report use refcount overflow (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix underflow in chain reference counter (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow timeout for anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow updates of anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: reject unbound chain set before commit phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: reject unbound anonymous set before commit phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow element updates of bound anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix underflow in object reference counter (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: drop map element references from preparation phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: validate variable length element extension (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: .walk does not deal with generations (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: relax set/map validation checks (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: integrate pipapo into commit protocol (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: upfront validation of data via nft_data_init() (Florian Westphal) [RHEL-22131 RHEL-1720]
  - rbd: don't move requests to the running list on errors (Ilya Dryomov) [RHEL-23863 RHEL-21939]
  - ASoC: SOF: intel: hda: Clean up link DMA for IPC3 during stop (Jaroslav Kysela) [RHEL-24033 RHEL-13724]
  - platform/x86/intel-uncore-freq: Return error on write frequency (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Add client processors (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Use sysfs_emit() to instead of scnprintf() (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Prevent driver loading in guests (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes (David Arcari) [RHEL-15751 2177013]
  - Documentation: admin-guide: pm: Document uncore frequency scaling (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel-uncore-freq: Split common and enumeration part (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Display uncore current frequency (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Use sysfs API to create attributes (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Move to uncore-frequency folder (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-frequency: use default_groups in kobj_type (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-frequency: Move to intel sub-directory (David Arcari) [RHEL-15751 2177013]
  - Revert "platform/x86: intel-uncore-freq: add Emerald Rapids support" (David Arcari) [RHEL-15751 2177013]
  - iommu/iova: Manage the depot list size (Jay Shin) [RHEL-21517 RHEL-11148]
  - iommu/iova: Make the rcache depot scale better (Jay Shin) [RHEL-21517 RHEL-11148]
  - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-16741 RHEL-16742 RHEL-14571 RHEL-15927]
  - drm/amd: Fix detection of _PR3 on the PCIe root port (Michel Dänzer) [RHEL-16741 RHEL-16742 RHEL-14571 RHEL-15927]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.24.1.el9_3]
changelog:
  - RDMA/mlx5: Fix assigning access flags to cache mkeys (Mohammad Kabat) [RHEL-25242 RHEL-882]
  - drm/amdgpu: Fix potential fence use-after-free v2 (Jan Stancek) [RHEL-24501 RHEL-24504 RHEL-22506 RHEL-22507] {CVE-2023-51042}
  - ceph: defer stopping mdsc delayed_work (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: never send metrics if disable_send_metrics is set (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: issue a cap release immediately if no cap exists (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: trigger to flush the buffer when making snapshot (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: fix blindly expanding the readahead windows (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: add a dedicated private data for netfs rreq (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: voluntarily drop Xx caps for requests those touch parent mtime (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: try to dump the msgs when decoding fails (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: only send metrics when the MDS rank is ready (Xiubo Li) [RHEL-22256 RHEL-16415]
  - x86/boot: Ignore NMIs during very early boot (Derek Barbosa) [RHEL-24449 RHEL-9380]
  - Documentation, mm/unaccepted: document accept_memory kernel parameter (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - proc/kcore: do not try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: do not let /proc/vmcore try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix off-by-one when checking for overlapping ranges (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Mark TSC reliable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: kABI fixup for struct zone (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: introduce NR_VM_ZONE_STAT_ITEMS_ACTUAL for kABI-preserving zone stats (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: 9.3 kABI fixup for struct efi (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Fix enc_status_change_finish_noop() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Allow guest.enc_status_change_prepare() to fail (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/coco: Mark cc_platform_has() and descendants noinstr (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: fix obsolete comment in deferred_pfn_valid() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Change npages to unsigned long in snp_accept_memory() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Make sure unaccepted table is mapped (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/efi: Safely enable unaccepted memory in UEFI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Add SNP-specific unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Use large PSC requests if applicable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Allow for use of the early boot GHCB for PSC requests (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Fix calculation of end address based on number of pages (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Wrap exit reason with hcall_func() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Refactor try_accept_one() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot/compressed: Handle unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: Implement support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: Get full memory map in allocate_e820() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - memblock tests: Fix compilation errors. (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: Add support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Centralize __pa()/__va() definitions (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Add an efi.h header for the decompressor (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Drop flags from __tdx_hypercall() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Disable NOTIFY_ENABLES (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - cpuidle, tdx: Make TDX code noinstr clean (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Remove TDX_HCALL_ISSUE_STI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: add pageblock_aligned() macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Disregard bogus entries instead of returning them (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move manipulation routines into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move EFI fake memmap support into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: install boot-time memory map as config table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove DT dependency from generic stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: unify initrd loading between architectures (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove pointless goto kludge (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: avoid efi_get_memory_map() for allocating the virt map (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: drop pointless get_memory_map() call (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: move efi_system_table global var into separate object (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: libstub: remove unused variable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Correct comment on efi_memmap_alloc (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - drivers: fix typo in firmware/efi/memmap.c (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - netfilter: nf_tables: skip set commit for deleted/destroyed sets (Phil Sutter) [RHEL-20683 RHEL-20686 RHEL-20214 RHEL-20217] {CVE-2024-0193}
  - redhat: add missing -rt JIRAs (Jan Stancek)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.16.1.el9_2]
changelog:
  - perf: Fix check before add_event_to_groups() in perf_group_detach() (Michael Petlan) [2192659 2192660] {CVE-2023-2235}
  - sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2203178 1996625]
  - ice: sleep, don't busy-wait, in the SQ send retry loop (Michal Schmidt) [2203154 RHEL-406]
  - ice: remove unused buffer copy code in ice_sq_send_cmd_retry() (Michal Schmidt) [2203154 RHEL-406]
  - ice: sleep, don't busy-wait, for ICE_CTL_Q_SQ_CMD_TIMEOUT (Michal Schmidt) [2203154 RHEL-406]
  - ice: remove ice_ctl_q_info::sq_cmd_timeout (Michal Schmidt) [2203154 RHEL-406]
  - ice: increase the GNSS data polling interval to 20 ms (Michal Schmidt) [2203154 RHEL-406]
  - ice: do not busy-wait to read GNSS data (Michal Schmidt) [2203154 RHEL-406]
  - redhat: set default zstream brew target for 9.2 (Herton R. Krzesinski)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.17.1.el9_2]
changelog:
  - cifs: fix wrong unlock before return from cifs_tree_connect() (Ronnie Sahlberg) [2209045 2182524]
  - CI: Use GA builder container (Michael Hofmann)
  - Remove the unnecessary unicode character (Tao Liu) [2208242 2187350]
  - workqueue: Fold rebind_worker() within rebind_workers() (Waiman Long) [2203229 2182337]
  - workqueue: Unbind kworkers before sending them to exit() (Waiman Long) [2203229 2182337]
  - workqueue: Don't hold any lock while rcuwait'ing for !POOL_MANAGER_ACTIVE (Waiman Long) [2203229 2182337]
  - workqueue: Convert the idle_timer to a timer + work_struct (Waiman Long) [2203229 2182337]
  - workqueue: Factorize unbind/rebind_workers() logic (Waiman Long) [2203229 2182337]
  - workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex (Waiman Long) [2203229 2182337]
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Waiman Long) [2203229 2182337]
  - workqueue: Change the comments of the synchronization about the idle_list (Waiman Long) [2203229 2182337]
  - workqueue: Remove the mb() pair between wq_worker_sleeping() and insert_work() (Waiman Long) [2203229 2182337]
  - workqueue: Remove the cacheline_aligned for nr_running (Waiman Long) [2203229 2182337]
  - workqueue: Move the code of waking a worker up in unbind_workers() (Waiman Long) [2203229 2182337]
  - workqueue: Remove the outdated comment before wq_worker_sleeping() (Waiman Long) [2203229 2182337]
  - workqueue: Fix unbind_workers() VS wq_worker_sleeping() race (Waiman Long) [2203229 2182337]
  - NFSD: RHEL-only bug introduced in fix for COMMIT and NFS4ERR_DELAY loop (Benjamin Coddington) [2203335 2196432]
  - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop (Benjamin Coddington) [2203335 2196432]
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Sabrina Dubroca) [2184152 2179816] {CVE-2023-28466}
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196134 2196135] {CVE-2023-32233}
  - xfs: verify buffer contents when we skip log replay (Andrey Albershteyn) [2187447 2187448] {CVE-2023-2124}
  - watchdog: wdat_wdt: Avoid unimplemented get_timeleft (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Set the min and max timeout values properly (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Remove #ifdef guards for PM related functions (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Stop watchdog when uninstalling module (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Stop watchdog when rebooting the system (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Using the existing function to check parameter timeout (David Arcari) [2192585 2189867]
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Tony Camuso) [2189487 2188409] {CVE-2023-2194}
  - mm/filemap: fix page end in filemap_get_read_batch (Nico Pache) [2189349 2181263]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.18.1.el9_2]
changelog:
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Baoquan He) [2210614 2116317]
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ricardo Robaina) [2196340 2196341] {CVE-2023-2002}
  - perf vendor events intel: Refresh jaketown metrics and events (Michael Petlan) [2207471 2190010]
  - perf vendor events: Update Intel jaketown (Michael Petlan) [2207471 2190010]
  - perf vendor events intel: Refresh ivytown metrics and events (Michael Petlan) [2207471 2190010]
  - perf vendor events: Update Intel ivytown (Michael Petlan) [2207471 2190010]
  - hugetlbfs: don't delete error page from pagecache (Aristeu Rozanski) [2192348 2184858]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.19.1.el9_2]
changelog:
  - device-dax: Fix duplicate 'hmem' device registration (Jeff Moyer) [2212386 2207496]
  - redhat/genlog.py: add support to list/process zstream Jira tickets (Herton R. Krzesinski)
  - ice: Remove LAG+SRIOV mutual exclusion (Michal Schmidt) [2209284 2203243]
  - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (Prarit Bhargava) [2185605 2139964]
  - module: Don't wait for GOING modules (Mark Langsdorf) [2186562 2028238]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.20.1.el9_2]
changelog:
  - ice: make writes to /dev/gnssX synchronous (Michal Schmidt) [2213186 2175764]
  - KVM: x86/mmu: Fix race condition in direct_page_fault (Jon Maloy) [2213165 2179930] {CVE-2022-45869}
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Foggy Liu) [2211656 2209194]
  - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (Waiman Long) [2187507 2176147]
  - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2187507 2176147]
  - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2187507 2176147]
  - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2187507 2176147]
  - locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2187507 2176147]
  - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2187507 2176147]
  - locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2187507 2176147]
  - locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2187507 2176147]
  - Revert "locking/rwsem: Conditionally wake waiters in reader/writer slowpaths" (Waiman Long) [2187507 2176147]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.18.1.el9_0]
changelog:
  - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) [2101858 2086367]
  - NFSv4 only print the label when its queried (Benjamin Coddington) [2101854 2057327]
  - crypto: fips - make proc files report fips module name and version (Simo Sorce) [2093384 2080499]
  - net: sched: fix use-after-free in tc_new_tfilter() (Ivan Vecera) [2071707 2090410] {CVE-2022-1055}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.19.1.el9_0]
changelog:
  - KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2100903 2074832]
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092248 2055566]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092248 2055566]
  - powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2092253 2062762]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.20.1.el9_0]
changelog:
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2106024 2066297] {CVE-2022-0494}
  - ahci: Add a generic 'controller2' RAID id (Tomas Henzl) [2099740 2078880]
  - ahci: remove duplicated PCI device IDs (Tomas Henzl) [2099740 2042790]
  - gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: buffered write prefaulting (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Variable rename (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2097306 2082193]
  - iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2097306 2082193]
  - iomap: iomap_write_failed fix (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2097306 2082193]
  - fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Make use of list_is_first (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2097306 2082193]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.21.1.el9_0]
changelog:
  - ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2103085 2061556]
  - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2098251 2095440]
  - scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2098251 2095440]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.22.1.el9_0]
changelog:
  - PCI: vmd: Revert 2565e5b69c44 ("PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled by IOMMU.") (Myron Stowe) [2109974 2084146]
  - PCI: vmd: Assign VMD IRQ domain before enumeration (Myron Stowe) [2109974 2084146]
  - rhel config: Set DMAR_UNITS_SUPPORTED (Jerry Snitselaar) [2105326 2094984]
  - iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2105326 2094984]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.23.1.el9_0]
changelog:
  - block: limit request dispatch loop duration (Ming Lei) [2111395 2066297]
  - block: ensure plug merging checks the correct queue at least once (Ming Lei) [2111395 2066297]
  - net/mlx5e: Don't block routes with nexthop objects in SW (Mohammad Kabat) [2092535 2061799]
  - net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects are used (Mohammad Kabat) [2092535 2049450]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.24.1.el9_0]
changelog:
  - nvme: fix RCU hole that allowed for endless looping in multipath round robin (Gopal Tiwari) [2117756 2108624]
  - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2117756 2066146]
  - nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2117756 2066146]
  - nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2117756 2066146]
  - block: fix surprise removal for drivers calling blk_set_queue_dying (Gopal Tiwari) [2117755 2066146]
  - nvme-tcp: fix bogus request completion when failing to send AER (Gopal Tiwari) [2117755 2066146]
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2117755 2066146]
  - kvm: x86: Add CPUID support for Intel AMX (David Arcari) [2108203 1924149]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.25.1.el9_0]
changelog:
  - powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2121719 2063682]
  - iavf: Fix deadlock in initialization (Ivan Vecera) [2119477 2037976]
  - iavf: Fix reset error handling (Ivan Vecera) [2119477 2037976]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Ivan Vecera) [2119477 2037976]
  - iavf: Fix adminq error handling (Ivan Vecera) [2119477 2037976]
  - iavf: Fix missing state logs (Ivan Vecera) [2119477 2037976]
  - iavf: Fix VLAN_V2 addition/rejection (Ivan Vecera) [2119477 2037976]
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Ivan Vecera) [2119477 2037976]
  - iavf: Fix issue with MAC address of VF shown as zero (Ivan Vecera) [2119477 2037976]
  - Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Ivan Vecera) [2119477 2037976]
  - iavf: Fix hang during reboot/shutdown (Ivan Vecera) [2119477 2037976]
  - iavf: Fix double free in iavf_reset_task (Ivan Vecera) [2119477 2037976]
  - iavf: Fix adopting new combined setting (Ivan Vecera) [2119477 2037976]
  - iavf: Fix handling of vlan strip virtual channel messages (Ivan Vecera) [2119477 2037976]
  - iavf: Fix __IAVF_RESETTING state usage (Ivan Vecera) [2119477 2037976]
  - iavf: Fix missing check for running netdev (Ivan Vecera) [2119477 2037976]
  - iavf: Fix deadlock in iavf_reset_task (Ivan Vecera) [2119477 2037976]
  - iavf: Fix race in init state (Ivan Vecera) [2119477 2037976]
  - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Ivan Vecera) [2119477 2037976]
  - iavf: Fix init state closure on remove (Ivan Vecera) [2119477 2037976]
  - iavf: Add waiting so the port is initialized in remove (Ivan Vecera) [2119477 2037976]
  - iavf: Rework mutexes for better synchronisation (Ivan Vecera) [2119477 2037976]
  - iavf: Remove non-inclusive language (Ivan Vecera) [2119477 2037976]
  - iavf: Fix incorrect use of assigning iavf_status to int (Ivan Vecera) [2119477 2037976]
  - iavf: stop leaking iavf_status as "errno" values (Ivan Vecera) [2119477 2037976]
  - iavf: remove redundant ret variable (Ivan Vecera) [2119477 2037976]
  - iavf: Add usage of new virtchnl format to set default MAC (Ivan Vecera) [2119477 2037976]
  - iavf: refactor processing of VLAN V2 capability message (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for 50G/100G in AIM algorithm (Ivan Vecera) [2119477 2037976]
  - iavf: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2119477 2037976]
  - iavf: remove an unneeded variable (Ivan Vecera) [2119477 2037976]
  - iavf: Fix limit of total number of queues to active queues of VF (Ivan Vecera) [2119477 2037976]
  - iavf: switch to napi_build_skb() (Ivan Vecera) [2119477 2037976]
  - iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Ivan Vecera) [2119477 2037976]
  - iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Ivan Vecera) [2119477 2037976]
  - virtchnl: Add support for new VLAN capabilities (Ivan Vecera) [2119477 2037976]
  - virtchnl: Use the BIT() macro for capability/offload flags (Ivan Vecera) [2119477 2037976]
  - virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define (Ivan Vecera) [2119477 2037976]
  - iavf: do not override the adapter state in the watchdog task (again) (Ivan Vecera) [2119477 2037976]
  - iavf: missing unlocks in iavf_watchdog_task() (Ivan Vecera) [2119477 2037976]
  - iavf: Fix reporting when setting descriptor count (Ivan Vecera) [2119477 2037976]
  - iavf: restore MSI state on reset (Ivan Vecera) [2119477 2037976]
  - iavf: Fix displaying queue statistics shown by ethtool (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor string format to avoid static analysis warnings (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor text of informational message (Ivan Vecera) [2119477 2037976]
  - iavf: Fix static code analysis warning (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor iavf_mac_filter struct memory usage (Ivan Vecera) [2119477 2037976]
  - iavf: Enable setting RSS hash key (Ivan Vecera) [2119477 2037976]
  - iavf: Add trace while removing device (Ivan Vecera) [2119477 2037976]
  - iavf: return errno code instead of status code (Ivan Vecera) [2119477 2037976]
  - iavf: Log info when VF is entering and leaving Allmulti mode (Ivan Vecera) [2119477 2037976]
  - iavf: Add change MTU message (Ivan Vecera) [2119477 2037976]
  - iavf: Fix VLAN feature flags after VFR (Ivan Vecera) [2119477 2037976]
  - iavf: Fix refreshing iavf adapter stats on ethtool request (Ivan Vecera) [2119477 2037976]
  - iavf: Fix deadlock occurrence during resetting VF interface (Ivan Vecera) [2119477 2037976]
  - iavf: Prevent changing static ITR values if adaptive moderation is on (Ivan Vecera) [2119477 2037976]
  - iavf: Restore VLAN filters after link down (Ivan Vecera) [2119477 2037976]
  - iavf: Fix for setting queues to 0 (Ivan Vecera) [2119477 2037976]
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Ivan Vecera) [2119477 2037976]
  - iavf: validate pointers (Ivan Vecera) [2119477 2037976]
  - iavf: prevent accidental free of filter structure (Ivan Vecera) [2119477 2037976]
  - iavf: Fix failure to exit out from last all-multicast mode (Ivan Vecera) [2119477 2037976]
  - iavf: don't clear a lock we don't hold (Ivan Vecera) [2119477 2037976]
  - iavf: free q_vectors before queues in iavf_disable_vf (Ivan Vecera) [2119477 2037976]
  - iavf: check for null in iavf_fix_features (Ivan Vecera) [2119477 2037976]
  - iavf: Fix return of set the new channel count (Ivan Vecera) [2119477 2037976]
  - iavf: Fix kernel BUG in free_msi_irqs (Ivan Vecera) [2119477 2037976]
  - iavf: Add helper function to go from pci_dev to adapter (Ivan Vecera) [2119477 2037976]
  - iavf: Combine init and watchdog state machines (Ivan Vecera) [2119477 2037976]
  - iavf: Add __IAVF_INIT_FAILED state (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor iavf state machine tracking (Ivan Vecera) [2119477 2037976]
  - iavf: fix double unlock of crit_lock (Ivan Vecera) [2119477 2037976]
  - iavf: use mutexes for locking of critical sections (Ivan Vecera) [2119477 2037976]
  - iavf: fix locking of critical sections (Ivan Vecera) [2119477 2037976]
  - iavf: do not override the adapter state in the watchdog task (Ivan Vecera) [2119477 2037976]
  - redhat: nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue)) (John Meneghini) [2118698 2112031]
  - x86/platform/uv: Log gap hole end size (Frank Ramsay) [2107732 2074097]
  - x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2107732 2074097]
  - x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2107732 2074097]
  - cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs (Steve Best) [2099417 2072886]
  - [s390] RDMA/mlx5: Fix number of allocated XLT entries (Mete Durlu) [2092270 2088360]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.26.1.el9_0]
changelog:
  - redhat/configs enable CONFIG_ICE_HWTS (Petr Oros) [2108204 2037974]
  - redhat/configs enable CONFIG_ICE_SWITCHDEV (Petr Oros) [2108204 2037974]
  - ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2119290 2116964]
  - ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2119290 2116964]
  - ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2119290 2116964]
  - ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2119290 2116964]
  - ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2119290 2116964]
  - ice: Fix promiscuous mode not turning off (Petr Oros) [2119290 2116964]
  - ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2119290 2116964]
  - ice: do not setup vlan for loopback VSI (Petr Oros) [2119290 2116964]
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2119290 2116964]
  - ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2119290 2116964]
  - ice: Fix max VLANs available for VF (Petr Oros) [2119290 2116964]
  - ice: change devlink code to read NVM in blocks (Petr Oros) [2119290 2116964]
  - ice: Fix memory corruption in VF driver (Petr Oros) [2108204 2037974]
  - ice: Fix queue config fail handling (Petr Oros) [2108204 2037974]
  - ice: Sync VLAN filtering features for DVM (Petr Oros) [2108204 2037974]
  - ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2108204 2037974]
  - ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2108204 2037974]
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2108204 2037974]
  - ice: fix crash when writing timestamp on RX rings (Petr Oros) [2108204 2037974]
  - ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2108204 2037974]
  - ice: clear stale Tx queue settings before configuring (Petr Oros) [2108204 2037974]
  - ice: Fix race during aux device (un)plugging (Petr Oros) [2108204 2037974]
  - ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2108204 2037974]
  - ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2108204 2037974]
  - ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
  - ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
  - ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2108204 2037974]
  - ice: fix crash in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2108204 2037974]
  - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2108204 2037974]
  - ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2108204 2037974]
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2108204 2037974]
  - ice: synchronize_rcu() when terminating rings (Petr Oros) [2108204 2037974]
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2108204 2037974]
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2108204 2037974]
  - ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2108204 2037974]
  - ice: Fix MAC address setting (Petr Oros) [2108204 2037974]
  - ice: Clear default forwarding VSI during VSI release (Petr Oros) [2108204 2037974]
  - ice: xsk: Fix indexing in ice_tx_xsk_pool() (Petr Oros) [2108204 2037974]
  - ice: xsk: Stop Rx processing when ntc catches ntu (Petr Oros) [2108204 2037974]
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Petr Oros) [2108204 2037974]
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Petr Oros) [2108204 2037974]
  - ice: add trace events for tx timestamps (Petr Oros) [2108204 2037974]
  - ice: fix return value check in ice_gnss.c (Petr Oros) [2108204 2037974]
  - ice: destroy flow director filter mutex after releasing VSIs (Petr Oros) [2108204 2037974]
  - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Petr Oros) [2108204 2037974]
  - ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2108204 2037974]
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2108204 2037974]
  - ice: cleanup long lines in ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2108204 2037974]
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2108204 2037974]
  - ice: convert ice_reset_vf to take flags (Petr Oros) [2108204 2037974]
  - ice: convert ice_reset_vf to standard error codes (Petr Oros) [2108204 2037974]
  - ice: make ice_reset_all_vfs void (Petr Oros) [2108204 2037974]
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2108204 2037974]
  - ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2108204 2037974]
  - ice: fix a long line warning in ice_reset_vf (Petr Oros) [2108204 2037974]
  - ice: introduce VF operations structure for reset flows (Petr Oros) [2108204 2037974]
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2108204 2037974]
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2108204 2037974]
  - ice: use ice_is_vf_trusted helper function (Petr Oros) [2108204 2037974]
  - ice: log an error message when eswitch fails to configure (Petr Oros) [2108204 2037974]
  - ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2108204 2037974]
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2108204 2037974]
  - ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2108204 2037974]
  - ice: remove unused definitions from ice_sriov.h (Petr Oros) [2108204 2037974]
  - ice: convert vf->vc_ops to a const pointer (Petr Oros) [2108204 2037974]
  - ice: remove circular header dependencies on ice.h (Petr Oros) [2108204 2037974]
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2108204 2037974]
  - ice: Fix FV offset searching (Petr Oros) [2108204 2037974]
  - ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2108204 2037974]
  - ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2108204 2037974]
  - ice: change "can't set link" message to dbg level (Petr Oros) [2108204 2037974]
  - ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2108204 2037974]
  - ice: Add support for inner etype in switchdev (Petr Oros) [2108204 2037974]
  - ice: Fix curr_link_speed advertised speed (Petr Oros) [2108204 2037974]
  - ice: Don't use GFP_KERNEL in atomic context (Petr Oros) [2108204 2037974]
  - ice: stop disabling VFs due to PF error responses (Petr Oros) [2108204 2037974]
  - ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2108204 2037974]
  - ice: introduce VF accessor functions (Petr Oros) [2108204 2037974]
  - ice: factor VF variables to separate structure (Petr Oros) [2108204 2037974]
  - ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2108204 2037974]
  - ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2108204 2037974]
  - ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2108204 2037974]
  - ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2108204 2037974]
  - ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2108204 2037974]
  - ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2108204 2037974]
  - ice: store VF pointer instead of VF ID (Petr Oros) [2108204 2037974]
  - ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2108204 2037974]
  - ice: add TTY for GNSS module for E810T device (Petr Oros) [2108204 2037974]
  - ice: initialize local variable 'tlv' (Petr Oros) [2108204 2037974]
  - ice: check the return of ice_ptp_gettimex64 (Petr Oros) [2108204 2037974]
  - ice: fix concurrent reset and removal of VFs (Petr Oros) [2108204 2037974]
  - ice: fix setting l4 port flag when adding filter (Petr Oros) [2108204 2037974]
  - ice: Match on all profiles in slow-path (Petr Oros) [2108204 2037974]
  - ice: enable parsing IPSEC SPI headers for RSS (Petr Oros) [2108204 2037974]
  - ice: Simplify tracking status of RDMA support (Petr Oros) [2108204 2037974]
  - ice: fix IPIP and SIT TSO offload (Petr Oros) [2108204 2037974]
  - ice: fix an error code in ice_cfg_phy_fec() (Petr Oros) [2108204 2037974]
  - ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2108204 2037974]
  - ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2108204 2037974]
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2108204 2037974]
  - ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2108204 2037974]
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2108204 2037974]
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2108204 2037974]
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2108204 2037974]
  - ice: Adjust naming for inner VLAN operations (Petr Oros) [2108204 2037974]
  - ice: Use the proto argument for VLAN ops (Petr Oros) [2108204 2037974]
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Petr Oros) [2108204 2037974]
  - ice: Introduce ice_vlan struct (Petr Oros) [2108204 2037974]
  - ice: Add new VSI VLAN ops (Petr Oros) [2108204 2037974]
  - ice: Add helper function for adding VLAN 0 (Petr Oros) [2108204 2037974]
  - ice: Refactor spoofcheck configuration functions (Petr Oros) [2108204 2037974]
  - ice: Remove likely for napi_complete_done (Petr Oros) [2108204 2037974]
  - ice: add support for DSCP QoS for IDC (Petr Oros) [2108204 2037974]
  - ice: respect metadata on XSK Rx to skb (Petr Oros) [2108204 2037974]
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2108204 2037974]
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2108204 2037974]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2108204 2037974]
  - ice: Use bitmap_free() to free bitmap (Petr Oros) [2108204 2037974]
  - ice: Optimize a few bitmap operations (Petr Oros) [2108204 2037974]
  - ice: Slightly simply ice_find_free_recp_res_idx (Petr Oros) [2108204 2037974]
  - ice: improve switchdev's slow-path (Petr Oros) [2108204 2037974]
  - ice: replay advanced rules after reset (Petr Oros) [2108204 2037974]
  - net: fixup build after bpf header changes (Petr Oros) [2108204 2037974]
  - net: Don't include filter.h from net/sock.h (Petr Oros) [2108204 2037974]
  - ice: Add flow director support for channel mode (Petr Oros) [2108204 2037974]
  - ice: switch to napi_build_skb() (Petr Oros) [2108204 2037974]
  - ice: xsk: fix cleaned_count setting (Petr Oros) [2108204 2037974]
  - ice: xsk: allow empty Rx descriptors on XSK ZC data path (Petr Oros) [2108204 2037974]
  - ice: xsk: allocate separate memory for XDP SW ring (Petr Oros) [2108204 2037974]
  - ice: xsk: return xsk buffers back to pool when cleaning the ring (Petr Oros) [2108204 2037974]
  - ice: trivial: fix odd indenting (Petr Oros) [2108204 2037974]
  - ice: support crosstimestamping on E822 devices if supported (Petr Oros) [2108204 2037974]
  - ice: exit bypass mode once hardware finishes timestamp calibration (Petr Oros) [2108204 2037974]
  - ice: ensure the hardware Clock Generation Unit is configured (Petr Oros) [2108204 2037974]
  - ice: implement basic E822 PTP support (Petr Oros) [2108204 2037974]
  - ice: convert clk_freq capability into time_ref (Petr Oros) [2108204 2037974]
  - ice: introduce ice_ptp_init_phc function (Petr Oros) [2108204 2037974]
  - ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Petr Oros) [2108204 2037974]
  - ice: PTP: move setting of tstamp_config (Petr Oros) [2108204 2037974]
  - ice: introduce ice_base_incval function (Petr Oros) [2108204 2037974]
  - ice: Fix E810 PTP reset flow (Petr Oros) [2108204 2037974]
  - ice: Don't put stale timestamps in the skb (Petr Oros) [2108204 2037974]
  - ice: Use div64_u64 instead of div_u64 in adjfine (Petr Oros) [2108204 2037974]
  - ice: use modern kernel API for kick (Petr Oros) [2108204 2037974]
  - ice: tighter control over VSI_DOWN state (Petr Oros) [2108204 2037974]
  - ice: use prefetch methods (Petr Oros) [2108204 2037974]
  - ice: update to newer kernel API (Petr Oros) [2108204 2037974]
  - ice: support immediate firmware activation via devlink reload (Petr Oros) [2108204 2037974]
  - ice: reduce time to read Option ROM CIVD data (Petr Oros) [2108204 2037974]
  - ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Petr Oros) [2108204 2037974]
  - ice: move and rename ice_check_for_pending_update (Petr Oros) [2108204 2037974]
  - ice: devlink: add shadow-ram region to snapshot Shadow RAM (Petr Oros) [2108204 2037974]
  - ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Petr Oros) [2108204 2037974]
  - ice: Remove unnecessary casts (Petr Oros) [2108204 2037974]
  - ice: Propagate error codes (Petr Oros) [2108204 2037974]
  - ice: Remove excess error variables (Petr Oros) [2108204 2037974]
  - ice: Cleanup after ice_status removal (Petr Oros) [2108204 2037974]
  - ice: Remove enum ice_status (Petr Oros) [2108204 2037974]
  - ice: Use int for ice_status (Petr Oros) [2108204 2037974]
  - ice: Remove string printing for ice_status (Petr Oros) [2108204 2037974]
  - ice: Refactor status flow for DDP load (Petr Oros) [2108204 2037974]
  - ice: Refactor promiscuous functions (Petr Oros) [2108204 2037974]
  - ice: refactor PTYPE validating (Petr Oros) [2108204 2037974]
  - ice: Add package PTYPE enable information (Petr Oros) [2108204 2037974]
  - ice: safer stats processing (Petr Oros) [2108204 2037974]
  - ice: fix adding different tunnels (Petr Oros) [2108204 2037974]
  - ice: fix choosing UDP header type (Petr Oros) [2108204 2037974]
  - ice: ignore dropped packets during init (Petr Oros) [2108204 2037974]
  - ice: rearm other interrupt cause register after enabling VFs (Petr Oros) [2108204 2037974]
  - ice: fix FDIR init missing when reset VF (Petr Oros) [2108204 2037974]
  - net/ice: Remove unused enum (Petr Oros) [2108204 2037974]
  - net/ice: Fix boolean assignment (Petr Oros) [2108204 2037974]
  - ice: avoid bpf_prog refcount underflow (Petr Oros) [2108204 2037974]
  - ice: fix vsi->txq_map sizing (Petr Oros) [2108204 2037974]
  - net/ice: Add support for enable_iwarp and enable_roce devlink param (Petr Oros) [2108204 2037974]
  - ice: Hide bus-info in ethtool for PRs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: Clear synchronized addrs when adding VFs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: fix error return code in ice_get_recp_frm_fw() (Petr Oros) [2108204 2037974]
  - ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Petr Oros) [2108204 2037974]
  - ice: Add support to print error on PHY FW load failure (Petr Oros) [2108204 2037974]
  - ice: Add support for changing MTU on PR in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: send correct vc status in switchdev (Petr Oros) [2108204 2037974]
  - ice: support for GRE in eswitch (Petr Oros) [2108204 2037974]
  - ice: low level support for tunnels (Petr Oros) [2108204 2037974]
  - ice: VXLAN and Geneve TC support (Petr Oros) [2108204 2037974]
  - ice: support for indirect notification (Petr Oros) [2108204 2037974]
  - ice: Add tc-flower filter support for channel (Petr Oros) [2108204 2037974]
  - ice: enable ndo_setup_tc support for mqprio_qdisc (Petr Oros) [2108204 2037974]
  - ice: Add infrastructure for mqprio support via ndo_setup_tc (Petr Oros) [2108204 2037974]
  - ice: fix an error code in ice_ena_vfs() (Petr Oros) [2108204 2037974]
  - ice: Refactor PR ethtool ops (Petr Oros) [2108204 2037974]
  - ice: Manage act flags for switchdev offloads (Petr Oros) [2108204 2037974]
  - ice: Forbid trusted VFs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: introduce XDP_TX fallback path (Petr Oros) [2108204 2037974]
  - ice: optimize XDP_TX workloads (Petr Oros) [2108204 2037974]
  - ice: propagate xdp_ring onto rx_ring (Petr Oros) [2108204 2037974]
  - ice: do not create xdp_frame on XDP_TX (Petr Oros) [2108204 2037974]
  - ice: unify xdp_rings accesses (Petr Oros) [2108204 2037974]
  - ice: ndo_setup_tc implementation for PR (Petr Oros) [2108204 2037974]
  - ice: ndo_setup_tc implementation for PF (Petr Oros) [2108204 2037974]
  - ice: Allow changing lan_en and lb_en on all kinds of filters (Petr Oros) [2108204 2037974]
  - ice: cleanup rules info (Petr Oros) [2108204 2037974]
  - ice: allow deleting advanced rules (Petr Oros) [2108204 2037974]
  - ice: allow adding advanced rules (Petr Oros) [2108204 2037974]
  - ice: create advanced switch recipe (Petr Oros) [2108204 2037974]
  - ice: manage profiles and field vectors (Petr Oros) [2108204 2037974]
  - ice: implement low level recipes functions (Petr Oros) [2108204 2037974]
  - ice: add port representor ethtool ops and stats (Petr Oros) [2108204 2037974]
  - ice: switchdev slow path (Petr Oros) [2108204 2037974]
  - ice: rebuild switchdev when resetting all VFs (Petr Oros) [2108204 2037974]
  - ice: enable/disable switchdev when managing VFs (Petr Oros) [2108204 2037974]
  - ice: introduce new type of VSI for switchdev (Petr Oros) [2108204 2037974]
  - ice: set and release switchdev environment (Petr Oros) [2108204 2037974]
  - ice: allow changing lan_en and lb_en on dflt rules (Petr Oros) [2108204 2037974]
  - ice: manage VSI antispoof and destination override (Petr Oros) [2108204 2037974]
  - ice: allow process VF opcodes in different ways (Petr Oros) [2108204 2037974]
  - ice: introduce VF port representor (Petr Oros) [2108204 2037974]
  - ice: Move devlink port to PF/VF struct (Petr Oros) [2108204 2037974]
  - ice: support basic E-Switch mode control (Petr Oros) [2108204 2037974]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Petr Oros) [2108204 2037974]
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Petr Oros) [2108204 2037974]
  - ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Petr Oros) [2108204 2037974]
  - ice: Only lock to update netdev dev_addr (Petr Oros) [2108204 2037974]
  - ice: restart periodic outputs around time changes (Petr Oros) [2108204 2037974]
  - ice: fix Tx queue iteration for Tx timestamp enablement (Petr Oros) [2108204 2037974]
  - devlink: Add 'enable_iwarp' generic device param (Petr Oros) [2108204 2037974]
  - i40e: Fix tunnel checksum offload with fragmented traffic (Ivan Vecera) [2119479 2037980]
  - i40e: Fix call trace in setup_tx_descriptors (Ivan Vecera) [2119479 2037980]
  - i40e: Fix calculating the number of queue pairs (Ivan Vecera) [2119479 2037980]
  - i40e: Fix adding ADQ filter to TC0 (Ivan Vecera) [2119479 2037980]
  - i40e: i40e_main: fix a missing check on list iterator (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Get rid of redundant 'fallthrough' (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Diversify return values from xsk_wakeup call paths (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Ivan Vecera) [2119479 2037980]
  - i40e: Add Ethernet Connection X722 for 10GbE SFP+ support (Ivan Vecera) [2119479 2037980]
  - i40e: Add vsi.tx_restart to i40e ethtool stats (Ivan Vecera) [2119479 2037980]
  - i40e: Add tx_stopped stat (Ivan Vecera) [2119479 2037980]
  - i40e: Add support for MPLS + TSO (Ivan Vecera) [2119479 2037980]
  - i40e: little endian only valid checksums (Ivan Vecera) [2119479 2037980]
  - i40e: stop disabling VFs due to PF error responses (Ivan Vecera) [2119479 2037980]
  - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat for tracking busy rx pages (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat for tracking pages waived (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat tracking new RX page allocations (Ivan Vecera) [2119479 2037980]
  - i40e: Aggregate and export RX page reuse stat (Ivan Vecera) [2119479 2037980]
  - i40e: Remove rx page reuse double count (Ivan Vecera) [2119479 2037980]
  - i40e: Fix race condition while adding/deleting MAC/VLAN filters (Ivan Vecera) [2119479 2037980]
  - i40e: Add new version of i40e_aq_add_macvlan function (Ivan Vecera) [2119479 2037980]
  - i40e: Add new versions of send ASQ command functions (Ivan Vecera) [2119479 2037980]
  - i40e: Add sending commands in atomic context (Ivan Vecera) [2119479 2037980]
  - i40e: Remove unused RX realloc stat (Ivan Vecera) [2119479 2037980]
  - i40e: Disable hw-tc-offload feature on driver load (Ivan Vecera) [2119479 2037980]
  - i40e: Fix reset path while removing the driver (Ivan Vecera) [2119479 2037980]
  - i40e: Fix reset bw limit when DCB enabled with 1 TC (Ivan Vecera) [2119479 2037980]
  - i40e: respect metadata on XSK Rx to skb (Ivan Vecera) [2119479 2037980]
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Ivan Vecera) [2119479 2037980]
  - i40e: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2119479 2037980]
  - i40e: fix unsigned stat widths (Ivan Vecera) [2119479 2037980]
  - i40e: Fix for failed to init adminq while VF reset (Ivan Vecera) [2119479 2037980]
  - i40e: Fix queues reservation for XDP (Ivan Vecera) [2119479 2037980]
  - i40e: Fix issue when maximum queues is exceeded (Ivan Vecera) [2119479 2037980]
  - i40e: Increase delay to 1 s after global EMP reset (Ivan Vecera) [2119479 2037980]
  - i40e: remove variables set but not used (Ivan Vecera) [2119479 2037980]
  - i40e: Remove non-inclusive language (Ivan Vecera) [2119479 2037980]
  - i40e: Update FW API version (Ivan Vecera) [2119479 2037980]
  - i40e: Minimize amount of busy-waiting during AQ send (Ivan Vecera) [2119479 2037980]
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix incorrect netdev's real number of RX/TX queues (Ivan Vecera) [2119479 2037980]
  - i40e: Fix for displaying message regarding NVM version (Ivan Vecera) [2119479 2037980]
  - i40e: fix use-after-free in i40e_sync_filters_subtask() (Ivan Vecera) [2119479 2037980]
  - i40e: Fix to not show opcode msg on unsuccessful VF MAC change (Ivan Vecera) [2119479 2037980]
  - i40e: switch to napi_build_skb() (Ivan Vecera) [2119479 2037980]
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Ivan Vecera) [2119479 2037980]
  - i40e: Fix pre-set max number of queues for VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix failed opcode appearing if handling messages from VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix display error code in dmesg (Ivan Vecera) [2119479 2037980]
  - i40e: Fix creation of first queue by omitting it if is not power of two (Ivan Vecera) [2119479 2037980]
  - i40e: Fix warning message and call stack during rmmod i40e driver (Ivan Vecera) [2119479 2037980]
  - i40e: Fix ping is lost after configuring ADq on VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix changing previously set num_queue_pairs for PFs (Ivan Vecera) [2119479 2037980]
  - i40e: Fix NULL ptr dereference on VSI filter sync (Ivan Vecera) [2119479 2037980]
  - i40e: Fix correct max_pkt_size on VF RX queue (Ivan Vecera) [2119479 2037980]
  - i40e: Fix freeing of uninitialized misc IRQ vector (Ivan Vecera) [2119479 2037980]
  - i40e: Fix spelling mistake "dissable" -> "disable" (Ivan Vecera) [2119479 2037980]
  - i40e: add support for PTP external synchronization clock (Ivan Vecera) [2119479 2037980]
  - i40e: improve locking of mac_filter_hash (Ivan Vecera) [2119479 2037980]
  - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (Florian Westphal) [2108199 2096401] {CVE-2022-1972}
  - netfilter: nf_tables: stricter validation of element data (Florian Westphal) [2104591 2104592] {CVE-2022-34918}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.9.1.el9_3]
changelog:
  - iavf: schedule a request immediately after add/delete vlan (Petr Oros) [RHEL-9460]
  - iavf: add iavf_schedule_aq_request() helper (Petr Oros) [RHEL-9460]
  - cgroup: always put cset in cgroup_css_set_put_fork (Jay Shin) [RHEL-14053]
  - cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers (Jay Shin) [RHEL-14053]
  - CI: Remove -rt suffix from kpet_tree_name values (Nikolai Kondrashov)
  - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) [RHEL-12359]
  - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) [RHEL-12359]
  - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) [RHEL-12359]
  - rbd: move rbd_dev_refresh() definition (Ilya Dryomov) [RHEL-12359]
  - CI: Remove unused kpet_tree_family (Nikolai Kondrashov)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.10.1.el9_3]
changelog:
  - perf/x86/amd: Do not WARN() on every IRQ (Michael Petlan) [RHEL-14363 RHEL-12341]
  - keys: Fix linking a duplicate key to a keyring's assoc_array (Jay Shin) [RHEL-14058 RHEL-9908]
  - vdpa/mlx5: Correct default number of queues when MQ is on (Laurent Vivier) [RHEL-12419 RHEL-7015]
  - redhat: fix bug/zjira sort in the changelog (Herton R. Krzesinski)
  - ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt) [RHEL-10381 RHEL-10357]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-362.11.1.el9_3]
changelog:
  - mm, mremap: fix mremap() expanding for vma's with vm_ops->close() (Donald Dutile) [RHEL-15277 RHEL-9198]
  - qed: fix LL2 RX buffer allocation (Chris Leech) [RHEL-14496 RHEL-8466]
  - fs/buffer.c: disable per-CPU buffer_head cache for isolated CPUs (Marcelo Tosatti) [RHEL-12101 2158709]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.12.1.el9_3]
changelog:
  - fs/smb/client: Reset password pointer to NULL (Scott Mayhew) [RHEL-11804 RHEL-11808 RHEL-11805 RHEL-11809] {CVE-2023-5345}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.13.1.el9_3]
changelog:
  - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15169 RHEL-15173 RHEL-15170 RHEL-15174] {CVE-2023-1192}
  - iommu: Optimise PCI SAC address trick (Jerry Snitselaar) [RHEL-15381 RHEL-11705]
  - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15191 RHEL-15202 RHEL-15192 RHEL-15203] {CVE-2023-45871}
  - bio-integrity: create multi-page bvecs in bio_integrity_add_page() (Ming Lei) [RHEL-15107 RHEL-13714]
  - bio-integrity: cleanup adding integrity pages to bip's bvec. (Ming Lei) [RHEL-15107 RHEL-13714]
  - bio-integrity: update the payload size in bio_integrity_add_page() (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: make bvec_try_merge_hw_page() non-static (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: don't pass a bio to bio_try_merge_hw_seg (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_size update out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: downgrade a bio_full call in bio_add_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_size overflow check in __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_vcnt check out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the BIO_CLONED checks out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: use SECTOR_SHIFT bio_add_hw_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: tidy up the bio full checks in bio_add_hw_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: kmsan: skip bio block merging logic for KMSAN (Ming Lei) [RHEL-15107 RHEL-13714]
  - redhat: change builder image to rhel-9.3 (Michael Hofmann)
  - x86/retpoline: Document some thunk handling aspects (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Add objtool_types.h (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - ice: Don't tx before switchdev is fully configured (Michal Schmidt) [RHEL-15799 2241234]
  - wifi: rtw89: Fix loading of compressed firmware (Jose Ignacio Tornos Martinez) [RHEL-14353 RHEL-13881]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Vitaly Kuznetsov) [RHEL-5757 RHEL-3904]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.14.1.el9_3]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8436 RHEL-8454 RHEL-8437 RHEL-8455] {CVE-2023-42753}
  - sctp: update hb timer immediately after users change hb_interval (Xin Long) [RHEL-14301 RHEL-14179]
  - sctp: update transport state when processing a dupcook packet (Xin Long) [RHEL-14301 RHEL-14179]
  - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) [RHEL-14301 RHEL-14179]
  - sctp: annotate data-races around sk->sk_wmem_queued (Xin Long) [RHEL-14301 RHEL-14179]
  - cifs: fix missing unload_nls() in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: avoid race conditions with parallel reconnects (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: update ip_addr for ses only for primary chan setup (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: prevent data race in cifs_reconnect_tcon() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: prevent data race in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11487 RHEL-11491 RHEL-11488 RHEL-11492] {CVE-2023-5178}
  - Enable CONFIG_DPLL (Petr Oros) [RHEL-15800 2232515]
  - ice: implement dpll interface to control cgu (Petr Oros) [RHEL-15800 2232515]
  - ice: add admin commands to access cgu configuration (Petr Oros) [RHEL-15800 2232515]
  - netdev: expose DPLL pin handle for netdevice (Petr Oros) [RHEL-15800 2232515]
  - dpll: netlink: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
  - dpll: core: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
  - dpll: spec: Add Netlink spec in YAML (Petr Oros) [RHEL-15800 2232515]
  - dpll: documentation on DPLL subsystem interface (Petr Oros) [RHEL-15800 2232515]
  - ice: do not re-enable miscellaneous interrupt until thread_fn completes (Petr Oros) [RHEL-15806 2229762]
  - ice: trigger PFINT_OICR_TSYN_TX interrupt instead of polling (Petr Oros) [RHEL-15806 2229762]
  - ice: introduce ICE_TX_TSTAMP_WORK enumeration (Petr Oros) [RHEL-15806 2229762]
  - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Rafael Aquini) [RHEL-11589 RHEL-2466]
  - sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-8701 2208016]
  - sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-8701 2208016]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.15.1.el9_3]
changelog:
  - drm/mgag200: Flush the cache to improve latency (Jocelyn Falempe) [RHEL-16560]
  - sched/fair: Make the BW replenish timer expire in hardirq context for PREEMPT_RT (Valentin Schneider) [RHEL-16842 RHEL-7232]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.14.1.el9_1]
changelog:
  - NFSD: fix use-after-free in __nfs42_ssc_open() (Benjamin Coddington) [2152815 2152816] {CVE-2022-4379}
  - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155930 2155277]
  - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155930 2155277]
  - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155930 2155277]
  - sched/core: Always flush pending blk_plug (Phil Auld) [2153792 2115520]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.15.1.el9_1]
changelog:
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158815 2140899]
  - x86/fpu: Do not leak fpstate pointer on fork (Rafael Aquini) [2133083 2120448]
  - Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" (Torez Smith) [2153277 2113003]
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2154859 2119067] {CVE-2022-2873}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.16.1.el9_1]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152929 2152931] {CVE-2022-3564}
  - gitlab-ci: use CI templates from production branch (Michael Hofmann)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.17.1.el9_1]
changelog:
  - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155459 2100404]
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  - blk-mq: run queue no matter whether the request is the last request (Ming Lei) [2162535 2118511]
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161724 2161725] {CVE-2023-0179}
  - nvme-tcp: fix regression that causes sporadic requests to time out (Gopal Tiwari) [2161344 2124526]
  - netfs: Fix dodgy maths (Xiubo Li) [2161418 2138981]
  - netfs: Fix missing xas_retry() calls in xarray iteration (Xiubo Li) [2161418 2138981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.18.1.el9_1]
changelog:
  - powerpc/pseries: Use lparcfg to reconfig VAS windows for DLPAR CPU (Steve Best) [2154305 2133101]
  - redhat/configs: Change the amd-pstate driver from builtin to loadable (David Arcari) [2151274 2143793]
  - powerpc/pseries/mobility: set NMI watchdog factor during an LPM (Steve Best) [2140085 2122830]
  - powerpc/watchdog: introduce a NMI watchdog's factor (Steve Best) [2140085 2122830]
  - watchdog: export lockup_detector_reconfigure (Steve Best) [2140085 2122830]
  - powerpc/mobility: wait for memory transfer to complete (Steve Best) [2140085 2122830]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.19.1.el9_1]
changelog:
  - sched/core: Use kfree_rcu() in do_set_cpus_allowed() (Waiman Long) [2160614 2143847]
  - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long) [2160614 2143847]
  - sched: Always clear user_cpus_ptr in do_set_cpus_allowed() (Waiman Long) [2143766 2107354]
  - sched: Enforce user requested affinity (Waiman Long) [2143766 2107354]
  - sched: Always preserve the user requested cpumask (Waiman Long) [2143766 2107354]
  - sched: Introduce affinity_context (Waiman Long) [2143766 2107354]
  - sched: Add __releases annotations to affine_move_task() (Waiman Long) [2143766 2107354]
  - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168382 2122851]
  - x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168382 2122851]
  - x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168382 2122851]
  - x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168382 2122851]
  - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168382 2122851]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.20.1.el9_1]
changelog:
  - cgroup/cpuset: remove unreachable code (Waiman Long) [2161105 1946801]
  - kselftest/cgroup: Add cpuset v2 partition root state test (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Update description of cpuset.cpus.partition in cgroup-v2.rst (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Make partition invalid if cpumask change violates exclusivity rule (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relocate a code block in validate_change() (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Show invalid partition reason string (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Add a new isolated cpus.partition type (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relax constraints to partition & cpus changes (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Allow no-task partition to have empty cpuset.cpus.effective (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Miscellaneous cleanups & add helper functions (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) [2161105 1946801]
  - cpuset: convert 'allowed' in __cpuset_node_allowed() to be boolean (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) [2161105 1946801]
  - cgroup: cleanup comments (Waiman Long) [2161105 1946801]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164655 2150278] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164655 2150278] {CVE-2022-4269}
  - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170227 2150660]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.21.1.el9_1]
changelog:
  - s390/boot: add secure boot trailer (Tobias Huschle) [2151528 2141966]
  - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166903 2161327]
  - s390/qeth: cache link_info for ethtool (Tobias Huschle) [2166304 2110436]
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127880 2121088]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.22.1.el9_1]
changelog:
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163390 2125540] {CVE-2023-0266}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.23.1.el9_1]
changelog:
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165344 2165345] {CVE-2023-0386}
  - intel_idle: make SPR C1 and C1E be independent (David Arcari) [2168361 2125352]
  - intel_idle: Add a new flag to initialize the AMX state (David Arcari) [2168361 2117766]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (David Arcari) [2168361 2117766]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Michael Petlan) [2168361 2140492]
  - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2168836 2161817]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156373 2156374] {CVE-2022-4744}


author: Sergio Correia <scorreia@redhat.com> - 6.5.1-1.1
changelog:
  - ima: Fix log evaluation on quick-succession execution of scripts
    Resolves: rhbz#2142032 - agent fails IMA attestation when one scripts is executed quickly after the other [rhel-9.1.0.z]


author: Sergio Correia <scorreia@redhat.com> - 6.5.1-1.2
changelog:
  - Segmentation fault in create_mb_refstate script
    Resolves: rhbz#2142034 - Segmentation fault in /usr/share/keylime/create_mb_refstate script [rhel-9.1.0.z]


author: Sergio Correia <scorreia@redhat.com> - 6.5.1-1.3
changelog:
  - Backport upstream PR#1156
    Resolves: rhbz#2142033 - Registrar may crash during EK validation when require_ek_cert is enabled [rhel-9.1.0.z]


author: Sergio Correia <scorreia@redhat.com> - 6.5.1-1.4
changelog:
  - Do not use default values that need reading the config in methods
    Resolves: rhbz#2142033 - Registrar may crash during EK validation when require_ek_cert is enabled [rhel-9.1.0.z]


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.4.0-1
changelog:
  - Rebased to libvirt-9.4.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946
      rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.1-4
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Brian C. Lane <bcl@redhat.com> - 9.0-25
changelog:
  - runtime-cleanup: Remove dropped packages from template (bcl)
    Resolves: rhbz#1991006
  - Install nvme-cli tool (bcl)
    Resolves: rhbz#2010254
  - sshd_config: Update sshd options (bcl)
    Resolves: rhbz#2007288


author: Brian C. Lane <bcl@redhat.com> - 9.0-26
changelog:
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: rhbz#1961092
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: rhbz#1961092


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-14.1
changelog:
  - Resolves: RHEL-12516 - nginx: HTTP/2: Multiple HTTP/2 enabled web 
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1.el9_2.1
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2217081]
  - Resolves: bz#2217081
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-9.2.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1.el9_2.2
changelog:
  - ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#2229160]
  - Resolves: bz#2229160
    ([ESXi] [RHEL 9 Beta]vmtoolsd task gets blocked in the uninterruptible state while attempting to delete a manifest file 'quiesce_manifest.xml' on a frozen file system [rhel-9.2.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1.el9_2.3
changelog:
  - open-vm-tools-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2414]
  - Resolves: RHEL-2414
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9.2.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
changelog:
  - ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
  - ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
  - Resolves: bz#1936382
    ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119286]
  - Resolves: bz#2119286
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.1.0])


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Tomáš Hozza <thozza@redhat.com> - 76-2
changelog:
  - distro/rhel: add payload repos to os package set (rhbz#2177699)
  - Manifest: always set kernel options in grub2 stage (rhbz#2162299)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.4.1.el9_0]
changelog:
  - vdpa/mlx5: Fix tracking of current number of VQs (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix is_index_valid() to refer to features (Cindy Lu) [2055451]
  - vdpa: Protect vdpa reset with cf_mutex (Cindy Lu) [2055451]
  - vdpa: Avoid taking cf_mutex lock on get status (Cindy Lu) [2055451]
  - vdpa/vdpa_sim_net: Report max device capabilities (Cindy Lu) [2055451]
  - vdpa: Use BIT_ULL for bit operations (Cindy Lu) [2055451]
  - vdpa/vdpa_sim: Configure max supported virtqueues (Cindy Lu) [2055451]
  - vdpa/mlx5: Report max device capabilities (Cindy Lu) [2055451]
  - vdpa: Support reporting max device capabilities (Cindy Lu) [2055451]
  - vdpa/mlx5: Restore cur_num_vqs in case of failure in change_num_qps() (Cindy Lu) [2055451]
  - vdpa: Add support for returning device configuration information (Cindy Lu) [2055451]
  - vdpa/mlx5: Support configuring max data virtqueue (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix config_attr_mask assignment (Cindy Lu) [2055451]
  - vdpa: Allow to configure max data virtqueues (Cindy Lu) [2055451]
  - vdpa: Read device configuration only if FEATURES_OK (Cindy Lu) [2055451]
  - vdpa: Sync calls set/get config/status with cf_mutex (Cindy Lu) [2055451]
  - vdpa/mlx5: Distribute RX virtqueues in RQT object (Cindy Lu) [2055451]
  - vdpa: Provide interface to read driver features (Cindy Lu) [2055451]
  - vdpa: clean up get_config_size ret value handling (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (Cindy Lu) [2055451]
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional (Cindy Lu) [2055451]
  - vdpa: Avoid duplicate call to vp_vdpa get_status (Cindy Lu) [2055451]
  - net/mlx5_vdpa: Offer VIRTIO_NET_F_MTU when setting MTU (Cindy Lu) [2055451]
  - vdpa: add driver_override support (Cindy Lu) [2055451]
  - docs: document sysfs ABI for vDPA bus (Cindy Lu) [2055451]
  - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (Cindy Lu) [2055451]
  - vdpa: Consider device id larger than 31 (Cindy Lu) [2055451]
  - virtio: always enter drivers/virtio/ (Cindy Lu) [2055451]
  - vdpa: check that offsets are within bounds (Cindy Lu) [2055451]
  - vdpa_sim: avoid putting an uninitialized iova_domain (Cindy Lu) [2055451]
  - vhost-vdpa: clean irqs before reseting vdpa device (Cindy Lu) [2055451]
  - vdpa/mlx5: Forward only packets with allowed MAC address (Cindy Lu) [2055451]
  - vdpa/mlx5: Support configuration of MAC (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (Cindy Lu) [2055451]
  - vdpa_sim_net: Enable user to set mac address and mtu (Cindy Lu) [2055451]
  - vdpa: Enable user to set mac and mtu of vdpa device (Cindy Lu) [2055451]
  - vdpa: Use kernel coding style for structure comments (Cindy Lu) [2055451]
  - vdpa: Introduce query of device config layout (Cindy Lu) [2055451]
  - vdpa: Introduce and use vdpa device get, set config helpers (Cindy Lu) [2055451]
  - vdpa/mlx5: Propagate link status from device to vdpa driver (Cindy Lu) [2055451]
  - vdpa/mlx5: Rename control VQ workqueue to vdpa wq (Cindy Lu) [2055451]
  - vdpa/mlx5: Remove mtu field from vdpa net device (Cindy Lu) [2055451]
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE (Cindy Lu) [2055451]
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min} (Cindy Lu) [2055451]
  - vdpa: min vq num of vdpa device cannot be greater than max vq num (Cindy Lu) [2055451]
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops (Cindy Lu) [2055451]
  - vp_vdpa: add vq irq offloading support (Cindy Lu) [2055451]
  - vdpa: fix typo (Cindy Lu) [2055451]
  - vhost-vdpa: Fix the wrong input in config_cb (Cindy Lu) [2055451]
  - vhost_vdpa: unset vq irq before freeing irq (Cindy Lu) [2055451]
  - vdpa: potential uninitialized return in vhost_vdpa_va_map() (Cindy Lu) [2055451]
  - vdpa/mlx5: Avoid executing set_vq_ready() if device is reset (Cindy Lu) [2055451]
  - vdpa/mlx5: Clear ready indication for control VQ (Cindy Lu) [2055451]
  - vdpa: Support transferring virtual addressing during DMA mapping (Cindy Lu) [2055451]
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap() (Cindy Lu) [2055451]
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map() (Cindy Lu) [2055451]
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB (Cindy Lu) [2055451]
  - vhost-vdpa: Handle the failure of vdpa_reset() (Cindy Lu) [2055451]
  - vdpa: Add reset callback in vdpa_config_ops (Cindy Lu) [2055451]
  - vdpa: Fix some coding style issues (Cindy Lu) [2055451]
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro (Cindy Lu) [2055451]
  - vdpa/mlx5: Add multiqueue support (Cindy Lu) [2055451]
  - vdpa/mlx5: Add support for control VQ and MAC setting (Cindy Lu) [2055451]
  - vdpa/mlx5: Ensure valid indices are provided (Cindy Lu) [2055451]
  - vdpa/mlx5: Decouple virtqueue callback from struct mlx5_vdpa_virtqueue (Cindy Lu) [2055451]
  - vdpa/mlx5: function prototype modifications in preparation to control VQ (Cindy Lu) [2055451]
  - vdpa/mlx5: Remove redundant header file inclusion (Cindy Lu) [2055451]
  - vDPA/ifcvf: enable multiqueue and control vq (Cindy Lu) [2055451]
  - vDPA/ifcvf: detect and use the onboard number of queues directly (Cindy Lu) [2055451]
  - vDPA/ifcvf: implement management netlink framework for ifcvf (Cindy Lu) [2055451]
  - vDPA/ifcvf: introduce get_dev_type() which returns virtio dev id (Cindy Lu) [2055451]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.5.1.el9_0]
changelog:
  - NFSD: Fix offset type in I/O trace points (Benjamin Coddington) [2063045]
  - NFSD: COMMIT operations must not return NFS?ERR_INVAL (Benjamin Coddington) [2063045]
  - NFSD: Clamp WRITE offsets (Benjamin Coddington) [2063045]
  - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (Benjamin Coddington) [2063045]
  - NFSD: Fix ia_size underflow (Benjamin Coddington) [2063045]
  - NFSD: Fix the behavior of READ near OFFSET_MAX (Benjamin Coddington) [2063045]
  - perf/x86/intel/uncore: Fix Intel SPR CHA event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Fix Intel SPR IIO event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add alias PMU name (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server framework (Michael Petlan) [2054100]
  - Revert "include/linux/ioport.h: Pad resource struct for KABI" (Prarit Bhargava) [2055736]
  - powerpc/pseries: Fix use after free in remove_phb_dynamic() (Prarit Bhargava) [2055736]
  - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [2064695]
  - KVM: use __vcalloc for very large allocations (David Hildenbrand) [2057367]
  - mm: use vmalloc_array and vcalloc for array allocations (David Hildenbrand) [2057367]
  - mm: vmalloc: introduce array allocation functions (David Hildenbrand) [2057367]
  - tpm: fix potential NULL pointer access in tpm_del_char_device (Desnes A. Nunes do Rosario) [2032117]
  - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Waiman Long) [2062158 2062168] {CVE-2021-26401 CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Warn about Spectre v2 LFENCE mitigation (Waiman Long) [2062158 2062168] {CVE-2021-26401 CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Update link to AMD speculation whitepaper (Waiman Long) [2062168] {CVE-2021-26401}
  - x86/speculation: Use generic retpoline by default on AMD (Waiman Long) [2062168] {CVE-2021-26401}
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - Documentation/hw-vuln: Update spectre doc (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Add eIBRS + Retpoline options (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86: deduplicate the spectre_v2_user documentation (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - redhat/configs: aarch64: Enable ARM_SPE_PMU (Mark Salter) [2063234]
  - drm/i915/audio: Use BIOS provided value for RKL HDA link (Mika Penttilä) [2046691]
  - redhat: configs: Disable TPM 1.2 device drivers (Jerry Snitselaar) [2060516]
  - redhat: configs: Change aarch64 default dma domain to lazy (Jerry Snitselaar) [2050415]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.6.1.el9_0]
changelog:
  - configs: enable CONFIG_RMI4_F3A (Benjamin Tissoires) [2067243]
  - block: release rq qos structures for queue without disk (Ming Lei) [2065610]
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [2064862] {CVE-2022-1011}
  - crypto: hmac - disallow keys < 112 bits in FIPS mode (Herbert Xu) [2033512]
  - crypto: hmac - add fips_skip support (Herbert Xu) [2033512]
  - crypto: des - disallow des3 in FIPS mode (Herbert Xu) [2033512]
  - crypto: dh - limit key size to 2048 in FIPS mode (Herbert Xu) [2033512]
  - crypto: rsa - limit key size to 2048 in FIPS mode (Herbert Xu) [2033512]
  - watch_queue: Make comment about setting ->defunct more accurate (David Howells) [2063758]
  - watch_queue: Fix lack of barrier/sync/lock between post and read (David Howells) [2063758]
  - watch_queue: Free the alloc bitmap when the watch_queue is torn down (David Howells) [2063758]
  - watch_queue: Fix the alloc bitmap size to reflect notes allocated (David Howells) [2063758]
  - watch_queue: Use the bitmap API when applicable (David Howells) [2063758]
  - watch_queue: Fix to always request a pow-of-2 pipe ring size (David Howells) [2063758]
  - watch_queue: Fix to release page in ->release() (David Howells) [2063758]
  - watch_queue, pipe: Free watchqueue state after clearing pipe ring (David Howells) [2063758]
  - watch_queue: Fix filter limit check (David Howells) [2063758] {CVE-2022-0995}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.7.1.el9_0]
changelog:
  - redhat/configs: drop some config options for rhel 9. (David Airlie) [2067027]
  - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Use the clearbhb instruction in mitigations (Waiman Long) [2062288] {CVE-2022-23960}
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Mitigate spectre style branch history side channels (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add percpu vectors for EL1 (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Add macro for reading symbol addresses from the trampoline (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Add vectors that have the bhb mitigation sequences (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Allow the trampoline text to occupy multiple pages (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Make the kpti trampoline's kpti sequence optional (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Move trampoline macros out of ifdef'd section (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Move the trampoline data page before the text page (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Free up another register on kpti's tramp_exit path (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Make the trampoline cleanup optional (Waiman Long) [2062288] {CVE-2022-23960}
  - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry.S: Add ventry overflow sanity checks (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add Cortex-A510 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add Cortex-X2 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: cpufeature: add HWCAP for FEAT_RPRES (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: add ID_AA64ISAR2_EL1 sys register (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: cpufeature: add HWCAP for FEAT_AFP (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add HWCAP for self-synchronising virtual counter (Waiman Long) [2062288] {CVE-2022-23960}
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (Jerry Snitselaar) [2061621]
  - redhat/configs: remove unnecessary GPIO options for aarch64 (Brian Masney) [2060951]
  - redhat/configs: remove viperboard related Kconfig options (Brian Masney) [2060951]


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Tom Stellard <tstellar@redhat.com> - 0.28-30
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/6742838)
  - Resolves: #2149776


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/bfac4a5)
  - Resolves: #2152026


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/28df097)
  - Resolves: #2158636


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/1a116d1)
  - Resolves: #2166104


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.10-3
changelog:
  - Security fix for CVE-2020-10735
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#1834423


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-1
changelog:
  - Update to 6.5.2
    Resolves: CVE-2022-3500
    Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other
    Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script
    Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-9
changelog:
  - RHEL 9 patch for openssl missing configuration file
    https://bugzilla.redhat.com/show_bug.cgi?id=1977214#c13


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Tomas Orsava <torsava@redhat.com> - 1.20.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Vladis Dronov <vdronov@redhat.com> - 0.6.7-1
changelog:
  - Update to qatengine v0.6.7 with openssl-3 support (bz 1874206, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.1
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2134896]
  - Resolves: bz#2134896
    (Windows guest reboot after migration with wsl2 installed inside [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.2
changelog:
  - kvm-migration-Read-state-once.patch [bz#2168221]
  - Resolves: bz#2168221
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-14.el9_2.4
changelog:
  - kvm-aio-posix-fix-race-between-epoll-upgrade-and-aio_set.patch [bz#2211923]
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2227721]
  - Resolves: bz#2211923
    ([qemu-kvm] rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization [rhel-9.2.0.z])
  - Resolves: bz#2227721
    ([rhel9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest [rhel-9.2.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-14.el9_2.5
changelog:
  - kvm-vdpa-net-move-iova-tree-creation-from-init-to-start.patch [RHEL-1060]
  - kvm-vdpa-reorder-vhost_vdpa_net_cvq_cmd_page_len-functio.patch [RHEL-1060]
  - kvm-vdpa-map-shadow-vrings-with-MAP_SHARED.patch [RHEL-1060]
  - kvm-io-remove-io-watch-if-TLS-channel-is-closed-during-h.patch [bz#2216503]
  - Resolves: RHEL-1060
    ([vhost-vdpa][rhel 9.2]Boot a guest with "x-svq=on", then hot unplug this nic, guest  trigger qemu core dump [rhel-9.2.0.z])
  - Resolves: bz#2216503
    (CVE-2023-3354 qemu-kvm: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service [rhel-9.2.0.z])


author: Gaël Chamoulaud <gchamoul@redhat.com> - 1-2
changelog:
  - fix - remove .in suffix from rhcd unit files
  - remove rhcd-override.conf
  - add rhcd path files to monitor existence of cert file + add rhcd stop service file which can stop rhcd when system is unsubscribed


author: Gaël Chamoulaud <gchamoul@redhat.com> - 1-5
changelog:
  - Disable RHSM config option manage_repos during installation
  - Enable rhcd auto-enablement only for RHEL>=8


author: Gaël Chamoulaud <gchamoul@redhat.com> - 1-6
changelog:
  - Split preset insights-client and rhcd. RHEL7 compatibility.
  - Add autoregistration when insights-client manually unregister


author: Nick Clifton <nickc@redhat.com> - 192-1
changelog:
  - Select between gcc-built and annobin-built versions of the annobin plugin.
  - Resolves: rhbz#2030671


author: Nick Clifton <nickc@redhat.com> - 196-1
changelog:
  - Pass "--remove section .gnu.build.attributes" to the find-debuginfo script.
  - Resolves: rhbz#2099613


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-9.1
changelog:
  - Resolves: #2074784 - A flaw found in zlib v1.2.2.2 through zlib v1.2.11 when compressing certain inputs


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.4.1.el9_3]
changelog:
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca) [RHEL-2248]
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeffrey Layton) [2218844]
  - drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttilä) [2231925]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.5.1.el9_3]
changelog:
  - x86/mce: Add support for Extended Physical Address MCA changes (Aristeu Rozanski) [2164637]
  - x86/mce: Define a function to extract ErrorAddr from MCA_ADDR (Aristeu Rozanski) [2164637]
  - x86/mce: Avoid unnecessary padding in struct mce_bank (Aristeu Rozanski) [2164637]
  - net/mlx5e: TC, Remove sample and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove mirror and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove tuple rewrite and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove multiple ct actions limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove CT action reordering (Amir Tzin) [2229736]
  - net/mlx5e: CT: Use per action stats (Amir Tzin) [2229736]
  - net/mlx5e: TC, Move main flow attribute cleanup to helper func (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove unused vf_tun variable (Amir Tzin) [2229736]
  - net/mlx5e: Set default can_offload action (Amir Tzin) [2229736]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.6.1.el9_3]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflate_workspacesize to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflateInit2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflateEnd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zalloc_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_run to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_end to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xas_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_set_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_get_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_clear_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_alloc_cyclic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __write_overflow_field to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vzalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __var_waitqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_shrinker to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_print_flags_seq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_setup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __tasklet_hi_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_freezing_cnt to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strscpy_pad to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strscpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strnlen_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sigprocmask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sg_page_iter_start to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sg_page_iter_dma_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sched_clock_cpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhltable_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_free_and_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_shrinker to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_dec_if_one to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __read_overflow2_field to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rcu_barrier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_insert_color to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_erase to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_tag_set to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_next_chunk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol qed_put_iscsi_ops to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol qed_put_eth_ops to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dointvec_minmax to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dointvec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prandom_u32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol on_each_cpu_cond_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol lockref_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol llist_add_batch to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrdup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol krealloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmemdup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmem_cache_create_usercopy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmem_cache_create to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmalloc_order_trace to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __kmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iowrite32be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread32be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread16be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol int_pow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_wait_var_entry to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_preload to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_get_next_ul to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_alloc_u32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol groups_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_nocheck_1 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_1 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol gcd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol current_umask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol copy_user_generic_unrolled to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol copy_user_generic_string to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol congestion_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_srcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blocking_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blkdev_get_by_path to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blkdev_get_by_dev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_zalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bio_kmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bin2hex to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol atomic_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __alloc_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-8864]
  - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (Paul Ely) [RHEL-2604]
  - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (Paul Ely) [RHEL-2604]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.7.1.el9_3]
changelog:
  - drm/amd: flush any delayed gfxoff on suspend entry (Mika Penttilä) [2232662]
  - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (Mika Penttilä) [2232662]
  - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (Mika Penttilä) [2232662]
  - Revert "net/mlx5e: Switch to using napi_build_skb()" (Mohammad Kabat) [RHEL-1267]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.8.1.el9_3]
changelog:
  - Revert "cnic: don't pass bogus GFP_ flags to dma_alloc_coherent" (Chris Leech) [RHEL-2542]
  - Revert "dma-mapping: reject __GFP_COMP in dma_alloc_attrs" (Chris Leech) [RHEL-2542]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.2.1.el9_2]
changelog:
  - net/mlx5: Serialize module cleanup with reload and remove (Mohammad Kabat) [2166480]
  - net/mlx5e: Remove redundant allocation of spec in create indirect fwd group (Mohammad Kabat) [2168640]
  - net/mlx5e: Support Geneve and GRE with VF tunnel offload (Mohammad Kabat) [2168640]
  - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (Amir Tzin) [2055536]
  - ice/ptp: fix the PTP worker retrying indefinitely if the link went down (Petr Oros) [2173049]
  - ice: reschedule ice_ptp_wait_for_offset_valid during reset (Petr Oros) [2173049]
  - ice: make Tx and Rx vernier offset calibration independent (Petr Oros) [2173049]
  - ice: only check set bits in ice_ptp_flush_tx_tracker (Petr Oros) [2173049]
  - ice: handle flushing stale Tx timestamps in ice_ptp_tx_tstamp (Petr Oros) [2173049]
  - ice: cleanup allocations in ice_ptp_alloc_tx_tracker (Petr Oros) [2173049]
  - ice: protect init and calibrating check in ice_ptp_request_ts (Petr Oros) [2173049]
  - ice: check Tx timestamp memory register for ready timestamps (Petr Oros) [2173049]
  - ice: handle discarding old Tx requests in ice_ptp_tx_tstamp (Petr Oros) [2173049]
  - ice: always call ice_ptp_link_change and make it void (Petr Oros) [2173049]
  - ice: fix misuse of "link err" with "link status" (Petr Oros) [2173049]
  - ice: Reset TS memory for all quads (Petr Oros) [2173049]
  - ice: Remove the E822 vernier "bypass" logic (Petr Oros) [2173049]
  - ice: Use more generic names for ice_ptp_tx fields (Petr Oros) [2173049]
  - ice: Merge pin initialization of E810 and E810T adapters (Petr Oros) [2173049]
  - ice: Check if reset in progress while waiting for offsets (Petr Oros) [2173049]
  - drm/nouveau/fb/tu102-: fix register used to determine scrub status (Karol Herbst) [2168647]
  - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (Karol Herbst) [2168647]
  - l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() (Guillaume Nault) [2174451]
  - self-tests: more rps self tests (Paolo Abeni) [2168875]
  - net: make default_rps_mask a per netns attribute (Paolo Abeni) [2168875]
  - self-tests: introduce self-tests for RPS default mask (Paolo Abeni) [2168875]
  - net: introduce default_rps_mask netns attribute (Paolo Abeni) [2168875]
  - net-sysctl: factor-out rpm mask manipulation helpers (Paolo Abeni) [2168875]
  - net-sysctl: factor out cpumask parsing helper (Paolo Abeni) [2168875]
  - net: mana: Fix IRQ name - add PCI and queue number (Mohammed Gamal) [2172863]
  - crypto: rng - Use a different crypto_rng for reseeding (Herbert Xu) [2174928]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.3.1.el9_2]
changelog:
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (Mark Langsdorf) [2170475]
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs (Mark Langsdorf) [2170475]
  - Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) [2156126]
  - NFSD: copy the whole verifier in nfsd_copy_write_verifier (Jeffrey Layton) [2166658]
  - nfsd: don't fsync nfsd_files on last close (Jeffrey Layton) [2166658]
  - NFSD: fix problems with cleanup on errors in nfsd4_copy (Jeffrey Layton) [2166658]
  - nfsd: fix race to check ls_layouts (Jeffrey Layton) [2166658]
  - nfsd: don't hand out delegation on setuid files being opened for write (Jeffrey Layton) [2127406]
  - nfsd: remove fs/nfsd/fault_inject.c (Jeffrey Layton) [2166658]
  - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (Jeffrey Layton) [2166658]
  - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath (Jeffrey Layton) [2166658]
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeffrey Layton) [2166658]
  - nfsd: eliminate __nfs4_get_fd (Jeffrey Layton) [2166658]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeffrey Layton) [2166658]
  - nfsd: eliminate find_deleg_file_locked (Jeffrey Layton) [2166658]
  - nfsd: don't take nfsd4_copy ref for OP_OFFLOAD_STATUS (Jeffrey Layton) [2166658]
  - nfsd: move reply cache initialization into nfsd startup (Jeffrey Layton) [2166658]
  - nfsd: fix potential race in nfs4_find_file (Jeffrey Layton) [1997177]
  - nfsd: allow nfsd_file_get to sanely handle a NULL pointer (Jeffrey Layton) [2166658]
  - NFSD: enhance inter-server copy cleanup (Jeffrey Layton) [2166658]
  - NFSD: Rename the fields in copy_stateid_t (Jeffrey Layton) [2166658]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.4.1.el9_2]
changelog:
  - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [2109548]
  - Revert "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2109548]
  - gfs2: Evict inodes cooperatively (Andreas Gruenbacher) [2109548]
  - gfs2: Flush delete work before shrinking inode cache (Andreas Gruenbacher) [2109548]
  - gfs2: Cease delete work during unmount (Bob Peterson) [2109548]
  - gfs2: Add SDF_DEACTIVATING super block flag (Bob Peterson) [2109548]
  - gfs2: check gl_object in rgrp glops (Bob Peterson) [2109548]
  - gfs2: Split the two kinds of glock "delete" work (Andreas Gruenbacher) [2109548]
  - gfs2: Move delete workqueue into super block (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of GLF_PENDING_DELETE flag (Andreas Gruenbacher) [2109548]
  - gfs2: Make glock lru list scanning safer (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up gfs2_scan_glock_lru (Andreas Gruenbacher) [2109548]
  - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [2109548]
  - gfs2: gl_object races fix (Andreas Gruenbacher) [2109548]
  - iomap/gfs2: Unlock and put folio in page_done handler (Andreas Gruenbacher) [2109548]
  - iomap: Add __iomap_put_folio helper (Andreas Gruenbacher) [2109548]
  - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (2) (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_try_evict cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Partially revert gfs2_inode_lookup change (Andreas Gruenbacher) [2109548]
  - gfs2: Add gfs2_inode_lookup comment (Andreas Gruenbacher) [2109548]
  - gfs2: Uninline and improve glock_{set,clear}_object (Andreas Gruenbacher) [2109548]
  - gfs2: Simply dequeue iopen glock in gfs2_evict_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up after gfs2_create_inode rework (Andreas Gruenbacher) [2109548]
  - gfs2: Avoid dequeuing GL_ASYNC glock holders twice (Andreas Gruenbacher) [2109548]
  - gfs2: Make gfs2_glock_hold return its glock argument (Andreas Gruenbacher) [2109548]
  - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) [2109548]
  - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Handle -EBUSY result of insert_inode_locked4 (Andreas Gruenbacher) [2109548]
  - gfs2: Fix and clean up create / evict interaction (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up initialization of "ip" in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of ghs[] in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Add extra error check in alloc_dinode (Andreas Gruenbacher) [2109548]
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) [2109548]
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) [2109548]
  - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [2109548]
  - gfs2: Dequeue waiters when withdrawn (Bob Peterson) [2109548]
  - gfs2: Prevent double iput for journal on error (Bob Peterson) [2109548]
  - gfs2: Convert gfs2_jhead_process_page() to use a folio (Andreas Gruenbacher) [2109548]
  - gfs2: remove ->writepage (Andreas Gruenbacher) [2109548]
  - gfs2: stop using generic_writepages in gfs2_ail1_start_one (Andreas Gruenbacher) [2109548]
  - gfs2: List traversal in do_promote is safe (Andreas Gruenbacher) [2109548]
  - gfs2: do_promote glock holder stealing fix (Bob Peterson) [2109548]
  - gfs2: Use better variable name (Andreas Gruenbacher) [2109548]
  - gfs2: Make go_instantiate take a glock (Andreas Gruenbacher) [2109548]
  - gfs2: Add new go_held glock operation (Andreas Gruenbacher) [2109548]
  - gfs2: Revert 'Fix "truncate in progress" hang' (Andreas Gruenbacher) [2109548]
  - gfs2: Instantiate glocks ouside of glock state engine (Andreas Gruenbacher) [2109548]
  - gfs2: Fix up gfs2_glock_async_wait (Andreas Gruenbacher) [2109548]
  - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Add GL_NOPID flag for process-independent glock holders (Andreas Gruenbacher) [2109548]
  - gfs2: Add flocks to glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Add glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_glock_nq_m cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Fix spelling mistake in comment (Andreas Gruenbacher) [2109548]
  - gfs2: Rewrap overlong comment in do_promote (Bob Peterson) [2109548]
  - gfs2: Remove redundant NULL check before kfree (Andreas Gruenbacher) [2109548]
  - gfs2: Use container_of() for gfs2_glock(aspace) (Andreas Gruenbacher) [2109548]
  - gfs2: dump inode object for iopen glocks (Bob Peterson) [2109548]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.5.1.el9_2]
changelog:
  - redhat: fix trivial syntax error in 64k-debug modules signing (Herton R. Krzesinski)
  - redhat/configs: Revert "enable DAMON configs" (Vladis Dronov)
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Ming Lei) [2164903]
  - afs: remove afs_cache_netfs and afs_zap_permits() declarations (Marc Dionne) [2166628]
  - afs: remove variable nr_servers (Marc Dionne) [2166628]
  - afs: Fix lost servers_outstanding count (Marc Dionne) [2166628]
  - afs: Fix server->active leak in afs_put_server (Marc Dionne) [2166628]
  - afs: Fix fileserver probe RTT handling (Marc Dionne) [2166628]
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (Marc Dionne) [2166628]
  - afs: Use the operation issue time instead of the reply time for callbacks (Marc Dionne) [2166628]
  - afs: Enable multipage folio support (Marc Dionne) [2166628]
  - afs: Fix access after dec in put functions (Marc Dionne) [2166628]
  - afs: Use refcount_t rather than atomic_t (Marc Dionne) [2166628]
  - afs: Fix dynamic root getattr (Marc Dionne) [2166628]
  - afs: Remove check of PageError (Marc Dionne) [2166628]
  - afs: Fix some checker issues (Marc Dionne) [2166628]
  - afs: Fix infinite loop found by xfstest generic/676 (Marc Dionne) [2166628]
  - afs: Adjust ACK interpretation to try and cope with NAT (Marc Dionne) [2166628]
  - afs: Prefer struct_size over open coded arithmetic (Marc Dionne) [2166628]
  - afs: Convert invalidatepage to invalidate_folio (Marc Dionne) [2166628]
  - afs: Convert directory aops to invalidate_folio (Marc Dionne) [2166628]
  - blk-mq: fix "bad unlock balance detected" on q->srcu in __blk_mq_run_dispatch_ops (Chris Leech) [2170101]
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jon Maloy) [2160029] {CVE-2022-2196}
  - ice: fix lost multicast packets in promisc mode (Petr Oros) [2170694]
  - net: use indirect calls helpers for sk_exit_memory_pressure() (Florian Westphal) [2155182]
  - bpf: pull before calling skb_postpull_rcsum() (Felix Maurer) [2164806]
  - bpf, sockmap: fix race in sock_map_free() (Felix Maurer) [2164806]
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Felix Maurer) [2164806]
  - xsk: Inherit need_wakeup flag for shared sockets (Felix Maurer) [2164806]
  - xsk: Fix backpressure mechanism on Tx (Felix Maurer) [2164806]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.6.1.el9_2]
changelog:
  - NFS: Correct timing for assigning access cache timestamp (Benjamin Coddington) [2180882]
  - nfsd: don't replace page in rq_pages if it's a continuation of last page (Jeffrey Layton) [2179342]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156374] {CVE-2022-4744}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.7.1.el9_2]
changelog:
  - rxrpc: Fix wrong error return in rxrpc_connect_call() (Marc Dionne) [2170099]
  - rxrpc: Fix incoming call setup race (Marc Dionne) [2170099]
  - rxrpc: Move client call connection to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move the client conn cache management to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Remove call->state_lock (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from recvmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from sendmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Wrap accesses to get call state to put the barrier in one place (Marc Dionne) [2170099]
  - rxrpc: Split out the call state changing functions into their own file (Marc Dionne) [2170099]
  - rxrpc: Set up a connection bundle from a call, not rxrpc_conn_parameters (Marc Dionne) [2170099]
  - rxrpc: Offload the completion of service conn security to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Make the set of connection IDs per local endpoint (Marc Dionne) [2170099]
  - rxrpc: Tidy up abort generation infrastructure (Marc Dionne) [2170099]
  - rxrpc: Clean up connection abort (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a connection (Marc Dionne) [2170099]
  - rxrpc: Only disconnect calls in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Only set/transmit aborts in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Separate call retransmission from other conn events (Marc Dionne) [2170099]
  - rxrpc: Make the local endpoint hold a ref on a connected call (Marc Dionne) [2170099]
  - rxrpc: Stash the network namespace pointer in rxrpc_local (Marc Dionne) [2170099]
  - rxrpc: Fix a couple of potential use-after-frees (Marc Dionne) [2170099]
  - rxrpc: Fix the return value of rxrpc_new_incoming_call() (Marc Dionne) [2170099]
  - rxrpc: rxperf: Fix uninitialised variable (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread stop (Marc Dionne) [2170099]
  - rxrpc: Fix switched parameters in peer tracing (Marc Dionne) [2170099]
  - rxrpc: Fix locking issues in rxrpc_put_peer_locked() (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread startup getting skipped (Marc Dionne) [2170099]
  - rxrpc: Fix NULL deref in rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Fix security setting propagation (Marc Dionne) [2170099]
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (Marc Dionne) [2170099]
  - rxrpc: Transmit ACKs at the point of generation (Marc Dionne) [2170099]
  - rxrpc: Fold __rxrpc_unuse_local() into rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Move the cwnd degradation after transmitting packets (Marc Dionne) [2170099]
  - rxrpc: Trace/count transmission underflows and cwnd resets (Marc Dionne) [2170099]
  - rxrpc: Remove the _bh annotation from all the spinlocks (Marc Dionne) [2170099]
  - rxrpc: Make the I/O thread take over the call and local processor work (Marc Dionne) [2170099]
  - rxrpc: Extract the peer address from an incoming packet earlier (Marc Dionne) [2170099]
  - rxrpc: Reduce the use of RCU in packet input (Marc Dionne) [2170099]
  - rxrpc: Simplify skbuff accounting in receive path (Marc Dionne) [2170099]
  - rxrpc: Remove RCU from peer->error_targets list (Marc Dionne) [2170099]
  - rxrpc: Move DATA transmission into call processor work item (Marc Dionne) [2170099]
  - rxrpc: Copy client call parameters into rxrpc_call earlier (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a call (Marc Dionne) [2170099]
  - rxrpc: Don't use sk->sk_receive_queue.lock to guard socket state changes (Marc Dionne) [2170099]
  - rxrpc: Remove call->input_lock (Marc Dionne) [2170099]
  - rxrpc: Move error processing into the local endpoint I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move packet reception processing into I/O thread (Marc Dionne) [2170099]
  - rxrpc: Create a per-local endpoint receive queue and I/O thread (Marc Dionne) [2170099]
  - rxrpc: Split the receive code (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for connection workqueue (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for call timer or workqueue (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for sk_buff tracing (Marc Dionne) [2170099]
  - rxrpc: Trace rxrpc_bundle refcount (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_call tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_conn tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_peer tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_local tracing (Marc Dionne) [2170099]
  - rxrpc: Extract the code from a received ABORT packet much earlier (Marc Dionne) [2170099]
  - rxrpc: Drop rxrpc_conn_parameters from rxrpc_connection and rxrpc_bundle (Marc Dionne) [2170099]
  - rxrpc: Remove the [_k]net() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove the [k_]proto() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove handling of duplicate packets in recvmsg_queue (Marc Dionne) [2170099]
  - rxrpc: Fix call leak (Marc Dionne) [2170099]
  - rxrpc: Enable rxperf test module (Marc Dionne) [2170099]
  - rxrpc: Implement an in-kernel rxperf server for testing purposes (Marc Dionne) [2170099]
  - rxrpc: Fix checker warning (Marc Dionne) [2170099]
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (Marc Dionne) [2170099]
  - rxrpc: uninitialized variable in rxrpc_send_ack_packet() (Marc Dionne) [2170099]
  - rxrpc: fix rxkad_verify_response() (Marc Dionne) [2170099]
  - rxrpc: Fix network address validation (Marc Dionne) [2170099]
  - rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket (Marc Dionne) [2170099]
  - rxrpc: Allocate an skcipher each time needed rather than reusing (Marc Dionne) [2170099]
  - rxrpc: Fix congestion management (Marc Dionne) [2170099]
  - rxrpc: Remove the rxtx ring (Marc Dionne) [2170099]
  - rxrpc: Save last ACK's SACK table rather than marking txbufs (Marc Dionne) [2170099]
  - rxrpc: Remove call->lock (Marc Dionne) [2170099]
  - rxrpc: Don't use a ring buffer for call Tx queue (Marc Dionne) [2170099]
  - rxrpc: Get rid of the Rx ring (Marc Dionne) [2170099]
  - rxrpc: Clone received jumbo subpackets and queue separately (Marc Dionne) [2170099]
  - rxrpc: Split the rxrpc_recvmsg tracepoint (Marc Dionne) [2170099]
  - rxrpc: Clean up ACK handling (Marc Dionne) [2170099]
  - rxrpc: Allocate ACK records at proposal and queue for transmission (Marc Dionne) [2170099]
  - rxrpc: Define rxrpc_txbuf struct to carry data to be transmitted (Marc Dionne) [2170099]
  - rxrpc: Remove call->tx_phase (Marc Dionne) [2170099]
  - rxrpc: Remove the flags from the rxrpc_skb tracepoint (Marc Dionne) [2170099]
  - rxrpc: Remove unnecessary header inclusions (Marc Dionne) [2170099]
  - rxrpc: Call udp_sendmsg() directly (Marc Dionne) [2170099]
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (Marc Dionne) [2170099]
  - rxrpc: Record stats for why the REQUEST-ACK flag is being set (Marc Dionne) [2170099]
  - rxrpc: Record statistics about ACK types (Marc Dionne) [2170099]
  - rxrpc: Add stats procfile and DATA packet stats (Marc Dionne) [2170099]
  - rxrpc: Track highest acked serial (Marc Dionne) [2170099]
  - rxrpc: Split call timer-expiration from call timer-set tracepoint (Marc Dionne) [2170099]
  - rxrpc: Trace setting of the request-ack flag (Marc Dionne) [2170099]
  - rxrpc: Automatically generate trace tag enums (Marc Dionne) [2170099]
  - rxrpc: remove rxrpc_max_call_lifetime declaration (Marc Dionne) [2170099]
  - rxrpc: Remove rxrpc_get_reply_time() which is no longer used (Marc Dionne) [2170099]
  - rxrpc: Fix calc of resend age (Marc Dionne) [2170099]
  - rxrpc: Fix local destruction being repeated (Marc Dionne) [2170099]
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (Marc Dionne) [2170099]
  - rxrpc: Fix locking in rxrpc's sendmsg (Marc Dionne) [2170099]
  - net: rxrpc: fix clang -Wformat warning (Marc Dionne) [2170099]
  - rxrpc: Fix decision on when to generate an IDLE ACK (Marc Dionne) [2170099]
  - rxrpc: Don't let ack.previousPacket regress (Marc Dionne) [2170099]
  - rxrpc: Fix overlapping ACK accounting (Marc Dionne) [2170099]
  - rxrpc: Don't try to resend the request if we're receiving the reply (Marc Dionne) [2170099]
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings (Marc Dionne) [2170099]
  - rxrpc, afs: Fix selection of abort codes (Marc Dionne) [2170099]
  - rxrpc: Return an error to sendmsg if call failed (Marc Dionne) [2170099]
  - rxrpc: Fix locking issue (Marc Dionne) [2170099]
  - rxrpc: Use refcount_t rather than atomic_t (Marc Dionne) [2170099]
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (Marc Dionne) [2170099]
  - rxrpc: Enable IPv6 checksums on transport socket (Marc Dionne) [2170099]
  - rxrpc: Restore removed timer deletion (Marc Dionne) [2170099]
  - rxrpc: fix a race in rxrpc_exit_net() (Marc Dionne) [2170099]
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Marc Dionne) [2170099]
  - rxrpc: Fix call timer start racing with call destruction (Marc Dionne) [2170099]
  - rxrpc: Adjust retransmission backoff (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (Marc Dionne) [2170099]
  - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Marc Dionne) [2170099]
  - net: RxRPC: make dependent Kconfig symbols be shown indented (Marc Dionne) [2170099]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.8.1.el9_2]
changelog:
  - Reinstate "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2181344]
  - iavf: fix hang on reboot with ice (Stefan Assmann) [2175775]
  - xfs: fix off-by-one-block in xfs_discard_folio() (Carlos Maiolino) [2178173]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.10.1.el9_2]
changelog:
  - dm: fix __send_duplicate_bios() to always allow for splitting IO (Benjamin Marzinski) [2184420]
  - dm: fix improper splitting for abnormal bios (Benjamin Marzinski) [2184420]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.11.1.el9_2]
changelog:
  - vfio: Make the group FD disassociate from the iommu_group (Alex Williamson) [2180649]
  - vfio: Hold a reference to the iommu_group in kvm for SPAPR (Alex Williamson) [2180649]
  - vfio: Add vfio_file_is_group() (Alex Williamson) [2180649]
  - vfio: Change vfio_group->group_rwsem to a mutex (Alex Williamson) [2180649]
  - vfio: Remove the vfio_group->users and users_comp (Alex Williamson) [2180649]
  - vfio: Follow a strict lifetime for struct iommu_group (Alex Williamson) [2180649]


author: Jindrich Novy <jnovy@redhat.com> - 4:1.1.7-2
changelog:
  - rebuild for following CVEs:
  CVE-2021-43784 CVE-2022-41724 CVE-2023-28642
  - Resolves: #2033659
  - Resolves: #2179973
  - Resolves: #2183103


author: Lokesh Mandvekar <lsm5@redhat.com> - 4:1.1.9-2
changelog:
  - Rebuild for CVEs: CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2792
  - Related: Jira:RHEL-7454


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Andreas Schneider <asn@redhat.com> - 4.17.2-102
changelog:
  - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values
  - resolves: rhbz#2126175


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-103
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2131993


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-100
changelog:
  - related: rhbz#2131993 - Update to version 4.17.4
  - resolves: rhbz#2154373 - Fix CVE-2022-38023
  - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
  - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Andreas Schneider <asn@redhat.com> - 4.17.5-103
changelog:
  - resolves: rhbz#2223516 - Fix CVE-2023-3347 - SMB2 packet signing not enforced
  - resolves: rhbz#2223600 - Fix netlogon capabilities level 2


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-2
changelog:
  - Remove sysctl_fs_protected_* rules from RHEL9 OSPP (RHBZ#2081719)
  - Make rule audit_access_success_ unenforcing in RHEL9 OSPP (RHBZ#2058154)
  - Drop zipl_vsyscall_argument rule from RHEL9 OSPP profile (RHBZ#2060049)
  - make sysctl_user_max_user_namespaces in RHEL9 OSPP (RHBZ#2083716)
  - Remove some sysctl rules  related to network from RHEL9 OSPP (RHBZ#2081708)
  - Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809)
  - Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840)
  - Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040)
  - Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016)
  - Remove sshd_enable_strictmodes from OSPP (RHBZ#2105278)
  - Remove rules related to NIS services (RHBZ#2096602)
  - Make rule stricter when checking for FIPS crypto-policies (RHBZ#2057082)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - OSPP: utilize different audit rule set for different hardware platforms (RHBZ#1998583)
  - OSPP: update rules related to coredumps (RHBZ#2081688)
  - OSPP: update rules related to BPF (RHBZ#2081728)
  - fix description of require_singleuser_mode (RHBZ#2092799)
  - fix remediation of OpenSSL cryptopolicy (RHBZ#2108569)
  - OSPP: use minimal Authselect profile(RHBZ#2114979)


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2169443)
  - Fix remediation of audit watch rules (RHBZ#2169441)
  - Fix check firewalld_sshd_port_enabled (RHBZ#2169443)
  - Fix accepted control flags for pam_pwhistory (RHBZ#2169443)
  - Unselect rule logind_session_timeout (RHBZ#2169443)
  - Add support rainer scripts in rsyslog rules (RHBZ#2169445)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Jindrich Novy <jnovy@redhat.com> - 1.1.12-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.12
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061316


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1914315
  - Add boot from root support
  - Resolves: rhbz#1869768
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Bryan Gurney <bgurney@redhat.com> - 3.1.0-1
changelog:
  - Update to 3.1.0
  - Resolves: rhbz#2039946
  - Revise stratisd.spec file to unified format
  - Remove old rust2rpm config file


author: Bryan Gurney <bgurney@redhat.com> - 3.1.0-2
changelog:
  - Increment release number to include bugs fixed in 3.1.0
  - Resolves: rhbz#2039946
  - Pass optional size parameter for new filesystem
  - Resolves: rhbz#1990905
  - Unify rollback to refresh Clevis info on Clevis bind command
  - Resolves: rhbz#2005110
  - Retarget thinpool to cache device when initializing cache
  - Resolves: rhbz#2007018
  - Improve thin provisioning implementation
  - Resolves: rhbz#2040352
  - Verify udev info with libblkid before overwriting
  - Resolves: rhbz#2041624


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Javier Martinez Canillas <javierm@redhat.com> - 6.04-0.13
changelog:
  - Fix a bunch of annocheck problems (pjones)
  - Drop x86_64 ExclusiveArch for tftpboot subpackage
  - Make tftpboot subpackage completely noarch (yselkowi)


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12.2
changelog:
  - coredump: adjust whitespace (#2155516)
  - basic: add STRERROR() wrapper for strerror_r() (#2155516)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155516)
  - Packit: build SRPMs in Copr (#2155516)
  - test: support non-summer time (#2155516)
  - test: bump the base VM memory to 768M (#2155516)
  - test: don't overwrite existing $QEMU_OPTIONS (#2155516)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12.3
changelog:
  - shared/json: allow json_variant_dump() to return an error (#2149074)
  - shared/json: use different return code for empty input (#2149074)
  - coredump: avoid deadlock when passing processed backtrace data (#2149074)
  - test: disable flaky subtests that require udevadm wait/lock (#2149074)


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-21
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2049506


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-5
changelog:
  - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
    Resolves: bz#2167060


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-12
changelog:
  - Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3
  - Resolves: #2173872 Remove java-11-openjdk-headles as a tomcat dependency
  - Resolves: #2181461 CVE-2023-28708 tomcat: not including the secure attribute causes information
  - Resolves: #2210632 CVE-2023-28709
  - Resolves: #2184133 Add Obsoletes to tomcat package
  - Update patch command
  - Update source to include the CVE fixes


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
    - Includes changes in tzdata-2021b:
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16.1
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim
  - CVE-2022-1154 vim: use after free in utf_ptr2char
  - CVE-2022-1420 vim: Out-of-range Pointer Offset


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-6
changelog:
  - installer: Prefer xorrisofs over genisoimage/mkisofs (rhbz#1973236)
  - urlfetcher: Factor out ISOReader class (rhbz#1973236)
  - urlfetcher: Add xorriso ISOReader implementation (rhbz#1973236)
  - urlfetcher: Delete the 'isoinfo' ISOReader (rhbz#1973236)
  - Add gating.yaml for RHEL-9 (rhbz#1984222)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-9
changelog:
  - virt-install: add mediated device (rhbz#1995131)
  - virt-xml: add support for mediated devices (rhbz#1995131)
  - hostdev: use method get_mdev_uuid() (rhbz#1995131)
  - tests: verify MDEV support (rhbz#1995131)
  - virt-manager: enable MDEV support (rhbz#1995131)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-13
changelog:
  - cli: --filesystem: add binary.sandbox.mode and source.socket (rhbz#2045932)
  - nodedev: Improve error with unknown address strings (rhbz#2017840)


author: William Poteat <wpoteat@redhat.com> 1.31.14-1
changelog:
  - Merge run data into report (wpoteat@redhat.com)
  - Update the man page for the status mode (wpoteat@redhat.com)
  - Status execution (wpoteat@redhat.com)
  - Record last dates of succcess for sources and destinations
    (wpoteat@redhat.com)
  - Update certs for complex tests (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.15-1
changelog:
  - 1986973: Take out AHV removal patch mechanism (wpoteat@redhat.com)
  - Update AHV patch (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.16-1
changelog:
  - 1990550: Add the description for nutanix mode in man virt-who and man virt-
    who-config (wpoteat@redhat.com)
  - 1990337: The guest state in mapping should be uniform with other hypervisors
    1990338: The guest shows wrong active value "0" in mapping when it's running
    (wpoteat@redhat.com)
  - 1989646:  Get UnboundLocalError when configured hypervisor_id=hwuuid
    (wpoteat@redhat.com)
  - 1989645: Add dmi.system.uuid to ahv facts (wpoteat@redhat.com)
  - 1974624: proxy error with https (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.17-1
changelog:
  - Bypass stylish check on suds code (wpoteat@redhat.com)
  - 2000922: Add the suds code to virt-who in place of python3-suds package
    (wpoteat@redhat.com)
  - ENT-4004: Fix flake8 issues for test files (mhorky@redhat.com)
  - ENT-4004: Use four spaces for indentation (mhorky@redhat.com)
  - ENT-4004: Fix flake8 issues (mhorky@redhat.com)
  - ENT-4004: Add stylish tests (mhorky@redhat.com)
  - Cannot use ESX where python3-suds is not available (wpoteat@redhat.com)
  - 1981249: Stop using NTLM which requires MD4 (OpenSSL 3.0)
    (csnyder@redhat.com)
  - 1989877: Status command does not reach actual credentials checking
    (wpoteat@redhat.com)
  - Make changes to follow Conscious language initiative (mhorky@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.18-1
changelog:
  - 2000019: Convert non-latin1 username/password to bytes (jhnidek@redhat.com)
  - 2018052: Fix virt-who -s, when Hyper-V with new API is used
    (jhnidek@redhat.com)
  - ENT-4511: Remove six package from requirements (mhorky@redhat.com)
  - ENT-4511: Drop Python 2 only tests (mhorky@redhat.com)
  - ENT-4511: Drop six usage in suds tests (mhorky@redhat.com)
  - ENT-4511: Drop six usage in tests (mhorky@redhat.com)
  - ENT-4511: Drop six usage in virt-who code (mhorky@redhat.com)
  - ENT-4511: Drop OrderedDict implementation (mhorky@redhat.com)
  - Update for deprecation of MutableMapping (wpoteat@redhat.com)
  - Only query the VM related taks in AHV hypervisors. (amir.eibagi@nutanix.com)
  - Remove unused NTLM code as only basic auth is used (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.19-1
changelog:
  - 1990562: Remove the redundant 'update_interval' option from ahv config
    (wpoteat@redhat.com)
  - 1990561: rename configuration entry to show ahv specificity
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - 1987247: The connection value shows null for kubevirt mode in virt-who status
    json (wpoteat@redhat.com)
  - Addition of LGPLv3 license file from suds (wpoteat@redhat.com)
  - 2000415: Nutanix config needs to handle bad server value (wpoteat@redhat.com)
  - 1996942: Use cluster name instead of UUID for fabric consistency
    (wpoteat@redhat.com)
  - 1990758: Virt-who always prints YAMLLoadWarning for kubevirt mode
    (wpoteat@redhat.com)
  - 1990563: Move progress bar to stderr to keep stdout clean
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.22-1
changelog:
  - 2060949: Indicate that virt-who provides python-suds in the spec file
    (wpoteat@redhat.com)
  - Run complex tests as forked for consistent results (wpoteat@redhat.com)
  - Update releasers for current needs (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.23-1
changelog:
  - 2054504: Use usedforsecurity=False for md5() calls to make suds work on FIPS
    enabled systems (oalbrigt@redhat.com)


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 2.4-2
changelog:
  - Review fixes:
  - Fix Obsoletes
  - Use the prefix macro in the dictionary path
  - Use the license macro
  - Do not own the whole data directory, just the version 5 subdirectory


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061996
  - Resolves: #2075493
  - Resolves: #2075495
  - Resolves: #2075497


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-13
changelog:
  - Drop dependency on xorg-x11-font-utils, it was only there for one pkgconfig
    query for a variable that never changes value (#2148292)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-14
changelog:
  - CVE fix for: CVE-2022-4283 (#2151801), CVE-2022-46340 (#2151776),
    CVE-2022-46341 (#2151781), CVE-2022-46342 (#2151788),
    CVE-2022-46343 (#2151791), CVE-2022-46344 (#2151798)


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.4-3
changelog:
  - Bump version to 2.3.4-3
  - Resolves: rhbz#2189954 - RFE Improve reponse time to filters containing 'nsrole'
  - Resolves: rhbz#2189946 - RFE support of slapi_memberof for plugins/core server
  - Resolves: rhbz#1974242 - Paged search impacts performance


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: Mark Reynolds <mreynolds@redhat.com> - 2.1.3-1
changelog:
  - Bump version to 2.1.3-1
  - Resolves: Bug 2061801 - rebase 389-ds-base to 2.1.3
  - Resolves: Bug 1872451 - RFE - run as non-root
  - Resolves: Bug 2052527 - RFE - Provide an option to abort an Auto Member rebuild task
  - Resolves: Bug 2057056 - Import may break the replication because changelog starting csn may not be created
  - Resolves: Bug 2057063 - Add support for recursively deleting subentries
  - Resolves: Bug 2062778 - sending crafted message could result in DoS
  - Resolves: Bug 2064781 - expired password was still allowed to access the database
  - Resolves: Bug 2100337 - dsconf backend export userroot fails ldap.DECODING_ERROR


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972101]
  - Resolves: bz#1972101
    ([Azure][RHEL-9]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wala-Require-iptables-package.patch [bz#1978572]
  - Resolves: bz#1978572
    ([Azure][WALA][RHEL-9] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1.el9_0
changelog:
  - Rebase to 2.7.0.6-1 [bz#2110415]
  - Resolves: bz#2110415
    ([Azure][WALA][RHEL-9] [9.0.z]The latest RHEL 9 repositories contain a buggy old version of WALinuxAgent : 2.3.0.2, latest version is v2.7.0.6 [rhel-9.0.0.z])


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Nick Clifton <nickc@redhat.com> - 10.57-1
changelog:
  - Rebuild to work with LLVM14.  (#2061050)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)


author: Nick Clifton <nickc@redhat.com> - 10.68-1
changelog:
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.
  - Annocheck: Even more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)


author: Nick Clifton <nickc@redhat.com> - 10.70-1
changelog:
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-1
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.44-1
changelog:
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.


author: Nick Clifton <nickc@redhat.com> - 10.46-1
changelog:
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)


author: Nick Clifton <nickc@redhat.com> - 10.47-1
changelog:
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)


author: Nick Clifton <nickc@redhat.com> - 10.50-1
changelog:
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.


author: Nick Clifton <nickc@redhat.com> - 10.51-1
changelog:
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)


author: Nick Clifton <nickc@redhat.com> - 10.53-1
changelog:
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2056964]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2056964]
  - ci-Revert-Setting-highest-autoconnect-priority-for-netw.patch [bz#2056964]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2088448]
  - ci-Remove-rhel-specific-files.patch [bz#2088448]
  - Resolves: bz#2056964
    ([RHEL-9]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2088448
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2091640]
  - ci-cc_set_hostname-do-not-write-localhost-when-no-hostn.patch [bz#1980403]
  - Resolves: bz#2091640
    ([cloud][init] Add support for reading tags from instance metadata)
  - Resolves: bz#1980403
    ([RHV] RHEL 9 VM with cloud-init without hostname set doesn't result in the FQDN as hostname)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-4
changelog:
  - ci-Honor-system-locale-for-RHEL-1355.patch [bz#2061604]
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096270]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096270]
  - Resolves: bz#2061604
    (cloud-config will change /etc/locale.conf back to en_US.UTF-8 on rhel-guest-image-9.0)
  - Resolves: bz#2096270
    (Adjust udev/rules default path[rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - ci-Revert-Revert-Setting-highest-autoconnect-priority-f.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - Resolves: bz#2107463
    ([RHEL-9.1] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2104389
    ([RHEL-9.1]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2117532
    ([RHEL9.1] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2098501
    ([RHEL-9.1] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: Camilla Conte <cconte@redhat.com> - 22.1-6
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2153183]
  - Resolves: bz#2153183
    ([RHEL-9] Ensure network ready before cloud-init service runs on RHEL [rhel-9.1.0.z])


author: Camilla Conte <cconte@redhat.com> - 22.1-7.el9_1
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2165942]
  - Resolves: bz#2165942
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-9] [rhel-9.1.0.z])


author: Packit <hello@packit.dev> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139644)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Martin Pitt <mpitt@redhat.com> - 300.2-1
changelog:
  - Keep administrative access after a page reload (RHEL-5765)
  - spec: Move to BuildRequires: python3-devel (RHEL-2215)
  - Lots of test stabilizations


author: Martin Pitt <mpitt@redhat.com> - 300.3-1
changelog:
  - Fix crash with large file uploads (RHEL-5341)
  - Fix connecting to older bridges, in particular RHEL 8 (RHEL-3537)


author: Martin Pitt <mpitt@redhat.com> - 300.4-1
changelog:
  - client: Provide fallback for GLib.get_user_state_dir() (RHEL-18989)
  - bridge: Add back menu/tool names to cockpit-bridge --packages (RHEL-19004)
  - bridge: Add back support for x.min.js files (RHEL-19005)


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-1
changelog:
  - 1.28.7, urftopdf nor pdftoopvp aren't compiled anymore
  - 1904405 - HP M281fdw: čžš characters printed as squares with "driverless" driver


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.14-1
changelog:
  - dovecot updated to 2.3.14, pigeonhole to 0.5.14
  - use OpenSSL's implementation of HMAC
  - Remove autocreate, expire, snarf and mail-filter plugins.
  - Remove cydir storage driver.
  - Remove XZ/LZMA write support. Read support will be removed in future release.


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220826gitba0e0e4c6a-2
changelog:
  - edk2-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch [bz#1989857]
  - Resolves: bz#1989857
    (CVE-2021-38578 edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation [rhel-9.0])


author: Camilla Conte <cconte@redhat.com> - 20221207gitfff6d81270b5-1
changelog:
  - Rebase to edk2-stable202211 tag
    Resolves: RHEL-119
    (rebase edk2 to edk2-stable202211)
  - Resolves: RHEL-75
    (edk2 builds should show the build version)
  - Resolves: bz#2132951
    (edk2: Sort traditional virtualization builds before Confidential Computing builds)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-2
changelog:
  - edk2-use-rpm-build-flags-rh-only.patch [RHEL-177]
  - Resolves: RHEL-177
    (Enable GNU_RELRO security protection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-3
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [bz#2158173]
  - edk2-MdePkg-Remove-Itanium-leftover-data-structure-RH-onl.patch [bz#1983086]
  - Resolves: bz#2158173
    ([aarch64][numa] Failed to create 2 numa nodes in some hardwares)
  - Resolves: bz#1983086
    (Assertion failure when creating 1024 VCPU VM: [...]UefiCpuPkg/CpuMpPei/CpuBist.c(186): !EFI_ERROR (Status))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-4
changelog:
  - edk2-ArmVirt-don-t-use-unaligned-CopyMem-on-NOR-flash.patch [bz#2158173]
  - Resolves: bz#2158173
    ([aarch64][numa] Failed to create 2 numa nodes in some hardwares)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-5
changelog:
  - edk2-Revert-ArmVirtPkg-ArmVirtQemu-enable-initial-ID-map-.patch [bz#2157656]
  - Resolves: bz#2157656
    ([edk2] [aarch64] Unable to initialize EFI firmware when using edk2-aarch64-20221207gitfff6d81270b5-1.el9 in some hardwares)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-6
changelog:
  - edk2-update-build-script-rhel-only.patch [bz#2168046]
  - edk2-update-build-config-rhel-only.patch [bz#2168046]
  - edk2-add-release-date-to-builds-rh-only.patch [bz#2168046]
  - edk2-openssl-update.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583]
  - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583]
  - Resolves: bz#2168046
    ([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022)
  - Resolves: bz#2164534
    (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-9])
  - Resolves: bz#2164550
    (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-9])
  - Resolves: bz#2164565
    (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-9])
  - Resolves: bz#2164583
    (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-7
changelog:
  - edk2-Revert-MdeModulePkg-TerminalDxe-add-other-text-resol.patch [bz#2162307]
  - Resolves: bz#2162307
    (Broken GRUB output on a serial console)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-8
changelog:
  - edk2-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174605]
  - Resolves: bz#2174605
    ([EDK2] disable dynamic mmio window)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-9
changelog:
  - edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247]
  - Resolves: bz#2169247
    ([edk2] Install a sev guest with enrolled secure boot failed)


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Arjun Shankar <arjun@redhat.com> - 2.34-53
changelog:
  - Sync with upstream branch release/2.34/master,
    commit a4217408a3d6050a7f42ac23adb6ac7218dca85f:
  - Apply asm redirections in syslog.h before first use [BZ #27087]
  - _Static_assert needs two arguments for compatibility with GCC before 9


author: Florian Weimer <fweimer@redhat.com> - 2.34-57
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6484ae5b8c4d4314f748e4d3c9a9baa5385e57c5
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Regenerate ulps on x86_64 with GCC 12
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - Fix build of nptl/tst-thread_local1.cc with GCC 12
  - Fix stdio-common tests for GCC 12 -Waddress
  - Fix stdlib/tst-setcontext.c for GCC 12 -Warray-compare
  - resolv: Avoid GCC 12 false positive warning [BZ #28439].
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Drop elf/tls-macros.h in favor of __thread and tls_model attributes [BZ #28152] [BZ #28205]
  - time: Set daylight to 1 for matching DST/offset change (RHBZ#2155352)
  - elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776)
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - Use LFS and 64 bit time for installed programs (BZ #15333)


author: Florian Müllner <fmuellner@redhat.com> - 40.9-3
changelog:
  - Fix markup handling in highlighter
    Resolves: #2049194
  - Fix warning on restacking
    Resolves: #2053638


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git.el9_1.1
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2150268]
  - Resolves: bz#2150268
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0 [rhel-9.1.0.z])


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.9.0-4
changelog:
  - Drop Git commit hash from Release
  - Correctly enable IMDS patch
  - Switch to %autosetup
  - Set ExclusiveArch from %go_arches
  - Drop mention of networkd in package description


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Rebase FIPS patch against 8u352-b07
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12214
  - Resolves: RHEL-13526
  - Resolves: RHEL-13529
  - Resolves: RHEL-13532
  - Resolves: RHEL-13536
  - Resolves: RHEL-13539


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+8
  - Update release notes to 11.0.15.0+8
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2050458


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20991


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.7.1.el9_1]
changelog:
  - i2c: ismt: prevent memory corruption in ismt_access() (David Arcari) [2127532 2125582] {CVE-2022-3077}
  - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134588 2131667]
  - iavf: Fix reset error handling (Petr Oros) [2127884 2119712]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2127884 2119712]
  - iavf: Fix missing state logs (Petr Oros) [2127884 2119712]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.8.1.el9_1]
changelog:
  - redhat: fix the branch we pull from the documentation tree (Herton R. Krzesinski)
  - nvme-tcp: handle number of queue changes (John Meneghini) [2131359 2112025]
  - nvmet: expose max queues to configfs (John Meneghini) [2131359 2112025]
  - nvme-fabrics: parse nvme connect Linux error codes (John Meneghini) [2131359 2112025]
  - vfio/type1: Unpin zero pages (Alex Williamson) [2128514 2121855]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Oleg Nesterov) [2127881 2121271] {CVE-2022-30594}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.9.1.el9_1]
changelog:
  - CI: Remove deprecated variable (Veronika Kabatova)
  - drm: fix duplicated code in drm_connector_register (Karol Herbst) [2134619 2132575]
  - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) [2140153 1960467]
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139213 2136223]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.10.1.el9_1]
changelog:
  - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2132070 2131953]
  - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2132070 2131953]
  - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2132070 2131953]
  - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2132070 2131953]
  - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2132070 2131953]
  - ice: Fix switchdev rules book keeping (Petr Oros) [2132070 2131953]
  - ice: fix access-beyond-end in the switch code (Petr Oros) [2132070 2131953]
  - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2132070 2131953]
  - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2132070 2131953]
  - Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2132070 2131953]
  - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2132070 2131953]
  - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2132070 2131953]
  - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2132070 2131953]
  - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2132070 2131953]
  - ice: always check VF VSI pointer values (Petr Oros) [2132070 2131953]
  - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2132070 2131953]
  - ice: get switch id on switchdev devices (Petr Oros) [2132070 2131953]
  - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2132070 2131953]
  - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2132070 2131953]
  - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2132070 2131953]
  - ice, xsk: Avoid refilling single Rx descriptors (Petr Oros) [2132070 2131953]
  - ice, xsk: Diversify return values from xsk_wakeup call paths (Petr Oros) [2132070 2131953]
  - ice, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Petr Oros) [2132070 2131953]
  - ice, xsk: Decorate ICE_XDP_REDIR with likely() (Petr Oros) [2132070 2131953]
  - ice: Add mpls+tso support (Petr Oros) [2132070 2131953]
  - ice: switch: convert packet template match code to rodata (Petr Oros) [2132070 2131953]
  - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2132070 2131953]
  - ice: switch: use a struct to pass packet template params (Petr Oros) [2132070 2131953]
  - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2132070 2131953]
  - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2132070 2131953]
  - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2132070 2131953]
  - Documentation/admin-guide: Document nomodeset kernel parameter (Karol Herbst) [2145217 2143841]
  - drm: Move nomodeset kernel parameter to the DRM subsystem (Karol Herbst) [2145217 2143841]
  - selftests/bpf: Limit unroll_count for pyperf600 test (Frantisek Hrbata) [2144902 2139836]
  - nvme-fc: fix the fc_appid_store return value (Ewan D. Milne) [2136914 2113035]
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142168 2130652]
  - CI: Drop c9s CI parts (Veronika Kabatova)
  - CI: Use GA builder container (Veronika Kabatova)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.11.1.el9_1]
changelog:
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148152 2148153] {CVE-2022-4139}
  - memcg: prohibit unconditional exceeding the limit of dying tasks (Chris von Recklinghausen) [2143976 2120352]
  - mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2143976 2139747]
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Chris von Recklinghausen) [2143976 2120352]
  - pipe: Fix missing lock in pipe_resize_ring() (Ian Kent) [2141631 2141632] {CVE-2022-2959}
  - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964}
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964}
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.12.1.el9_1]
changelog:
  - x86/fpu: Drop fpregs lock before inheriting FPU permissions (Valentin Schneider) [2154407 2153181]
  - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2151605 2149277]
  - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150910 2092794]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.13.1.el9_1]
changelog:
  - scsi: qla2xxx: Fix crash when I/O abort times out (Nilesh Javali) [2152178 2115892]
  - net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155145 2153431]


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Jiri Denemark <jdenemar@redhat.com> - 8.4.0-1
changelog:
  - Rebased to libvirt-8.4.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#2057768, rhbz#2081981, rhbz#2035163, rhbz#2075837, rhbz#2082540
      rhbz#2075383


author: Jiri Denemark <jdenemar@redhat.com> - 7.10.0-1
changelog:
  - Rebased to libvirt-7.10.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2024098, rhbz#1964223, rhbz#2018488, rhbz#2021437, rhbz#2022589
      rhbz#2023605, rhbz#1431589, rhbz#2024435, rhbz#2016599, rhbz#1945501
      rhbz#2023674


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Brian C. Lane <bcl@redhat.com> 34.9.5-1
changelog:
  - Add a context manager for dracut (bcl@redhat.com)
    Resolves: rhbz#1982271
  - spec: Fix bug number for dropping gfs2-utils (bcl@redhat.com)
    Related: rhbz#1975378


author: Brian C. Lane <bcl@redhat.com> 34.9.6-1
changelog:
  - github: Run tests for rhel9-branch PRs (bcl@redhat.com)
    Related: rhbz#2000439
  - Install unicode.pf2 from new directory (bcl@redhat.com)
    Resolves: rhbz#2000439


author: Brian C. Lane <bcl@redhat.com> 34.9.7-1
changelog:
  - runtime-cleanup: Remove dropped package from template (bcl@redhat.com)
    Related: rhbz#1991006
  - sshd_config: Update sshd options (bcl@redhat.com)
    Related: rhbz#2007288
  - Install nvme-cli tool (bcl@redhat.com)
    Related: rhbz#2010254
  - When running the tests in docker/podman use the Fedora 34 image (bcl@redhat.com)
    Related: rhbz#2010542
  - Fix pylint warnings about string formatting (bcl@redhat.com)
    Related: rhbz#2010542
  - tests: Ignore new pylint warnings (bcl@redhat.com)
    Resolves: rhbz#2010542


author: Brian C. Lane <bcl@redhat.com> 34.9.8-1
changelog:
  - livemedia.ks: Drop unneeded commands (bcl@redhat.com)
    Related: rhbz#2017993
  - livemedia.ks: Install workstation-product-environment (bcl@redhat.com)
    Resolves: rhbz#2017993
  - templates: Change nomodeset / basic graphics to use inst.text (bcl@redhat.com)
    Related: rhbz#1961092
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl@redhat.com)
    Related: rhbz#1961092
  - livemedia.ks: Add isomd5sum for use with rd.live.check (bcl@redhat.com)
    Resolves: rhbz#2015908


author: Brian C. Lane <bcl@redhat.com> 34.9.9-1
changelog:
  - Change macboot default to false (bcl@redhat.com)
    Resolves: rhbz#2019512
  - livemedia-creator: Change defaults to Red Hat Enterprise Linux 9 (bcl@redhat.com)
    Resolves: rhbz#2019133


author: Brian C. Lane <bcl@redhat.com> 34.9.10-1
changelog:
  - mkksiso: Check the length of the filenames (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Check the iso's arch against the host's (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Add missing implantisomd5 tool requirements (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Raise error if no volume id is found (bcl@redhat.com)
    Related: rhbz#2028104
  - mount: Add s390x support to IsoMountopoint (bcl@redhat.com)
    Resolves: rhbz#2028104
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl@redhat.com)
  - mkksiso: Add -joliet-long (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Return 1 on errors (bcl@redhat.com)
    Related: rhbz#2028104


author: Brian C. Lane <bcl@redhat.com> 34.9.11-1
changelog:
  - Enable sftp when using inst.sshd (bcl@redhat.com)
    Resolves: rhbz#2040770
  - Drop ia32 uefi package installation (bcl@redhat.com)
    Resolves: rhbz#2039035
  - Remove 32-bit UEFI packages from example kickstart (bcl@redhat.com)
    Related: rhbz#2039035


author: Brian C. Lane <bcl@redhat.com> 34.9.12-1
changelog:
  - mkksiso: Improve debug message about unsupported arch (bcl@redhat.com)
    Related: rhbz#2049192
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl@redhat.com)
    Resolves: rhbz#2049192


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-34.1
changelog:
  - Fix Terrapin attack (CVE-2023-48795)
    Resolves: RHEL-19764
  - Forbid shell metasymbols in username/hostname (CVE-2023-51385)
    Resolves: RHEL-19822


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-2
changelog:
  - Various provider-related imrovements necessary for PKCS#11 provider correct operations
    Resolves: rhbz#2142517
  - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream
    Resolves: rhbz#2133809
  - Removed recommended package for openssl-libs
    Resolves: rhbz#2093804
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083879
  - Backport of ppc64le Montgomery multiply enhancement
    Resolves: rhbz#2130708
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2142087
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2142087


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-5
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-19
changelog:
  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-20
changelog:
  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306


author: Colin Walters <walters@verbum.org> - 2023.1-4
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912
    Resolves: rhbz#2224081


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2023.1-7
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/2969/commits/402e04280b54c058ad47be99fe6a9326caf2ae00
    Resolves: rhbz#2230111


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.6-1
changelog:
  - Bug #2107335 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.0.0.z]


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/68e7ae0)
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.6.1-7
changelog:
  - Rebuild for following CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Gris Ge <fge@redhat.com> - 2.2.22-1
changelog:
  - Use hash value to mark applied yml files at nmstatectl service. RHEL-19778
  - Support SRIOV VLAN protocol. RHEL-16487


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.23-1
changelog:
  - Upgrade to 2.2.23
  - Support type, hostaddrfamily and clientaddrfamily options in IPSec. RHEL-21354


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Vladis Dronov <vdronov@redhat.com> - 1.0.7-1
changelog:
  - Rebuild for qatzip v1.0.7
  - Fix snprintf truncation check (bz 2046925)
  - Add -fstack-protector-strong build option (bz 2044889)


author: John Kacur <jkacur@redhat.com> - 2.1-2
changelog:
  - Take into account the rename of the sched_features file for HRTICK
  - Use HRTICK_DL if available
  Resolves: rhbz#1973083


author: John Kacur <jkacur@redhat.com> - 2.1-6
changelog:
  - Fix potential double mount of cgroups for deadline_test
  - Fix potential double mount of cgroups for cyclicdeadline_test
  Resolves: rhbz#2011415


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.3-1
changelog:
  - Update to latest upstream 2.3
  - Correct the comment of numa_initialize()
  - oslat.8: Remove the argument of --bias
  Resolves: rhbz#2012297


author: John Kacur <jkacur@redhat.com> - 2.3-2
changelog:
  - Fix parsing of affinity
  - Ignore the runtime cpumask if a new cpumask is requested
  Resolves: rhbz#2050244


author: Alba Hita <ahitacat@redhat.com> - 0.1.8-0
changelog:
  - Fix: Bump ansible-runner to 1.1.1 and dependencies in vendor (RHBZ#2053212)
  - Upload new rhc-worker-playbook-1.1.8.tar.gz source


author: Gael Chamoulaud <gchamoul@redhat.com> 0.1.8-4
changelog:
  - Use thread.join(timeout) to avoid busy waiting and simplify interval event posting logic (rhbz#2115848)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.2-101
changelog:
  - resolves: rhbz#2093833 - Fix weak dependency on logrotate
  - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-101
changelog:
  - related: rhbz#2077487 - Rebase Samba to 4.16.3
  - resolves: rhbz#2097655 - The pcap background queue process should not be stopped
  - resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.23-1.2
changelog:
  - Allow qatlib set attributes of vfio device files
  Resolves: RHEL-19052
  - Allow qatlib load kernel modules
  Resolves: RHEL-19052
  - Allow qatlib run lspci
  Resolves: RHEL-19052
  - Allow qatlib manage its private runtime socket files
  Resolves: RHEL-19052
  - Allow qatlib read/write vfio devices
  Resolves: RHEL-19052


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.5-1
changelog:
  - Reuse tmpfs_t also for the ramfs filesystem
  Resolves: rhbz#2160391
  - Allow systemd-resolved watch tmpfs directories
  Resolves: rhbz#2160391
  - Allow hostname_t to read network sysctls.
  Resolves: rhbz#2161958
  - Allow ModemManager all permissions for netlink route socket
  Resolves: rhbz#2149560
  - Allow unconfined user filetransition for sudo log files
  Resolves: rhbz#2160388
  - Allow sudodomain use sudo.log as a logfile
  Resolves: rhbz#2160388
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  Resolves: rhbz#2154414
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  Resolves: rhbz#2149452
  - Allow rshim bpf cap2 and read sssd public files
  Resolves: rhbz#2080439
  - Allow svirt request the kernel to load a module
  Resolves: rhbz#2144735
  - Rebase selinux-policy to the latest one in rawhide
  Resolves: rhbz#2014606


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.6-1
changelog:
  - Allow modemmanager create hardware state information files
  Resolves: rhbz#2149560
  - Dontaudit ftpd the execmem permission
  Resolves: rhbz#2164434
  - Allow nm-dispatcher plugins read generic files in /proc
  Resolves: rhbz#2164845
  - Label systemd-journald feature LogNamespace
  Resolves: rhbz#2124797
  - Boolean: allow qemu-ga read ssh home directory
  Resolves: rhbz#1917024


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.7-1
changelog:
  - Allow staff_t getattr init pid chr & blk files and read krb5
  Resolves: rhbz#2112729
  - Allow firewalld to rw z90crypt device
  Resolves: rhbz#2166877
  - Allow httpd work with tokens in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1
changelog:
  - Allow svirt to map svirt_image_t char files
  Resolves: rhbz#2170482
  - Fix opencryptoki file names in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.9-1
changelog:
  - Boolean: allow qemu-ga manage ssh home directory
  Resolves: rhbz#2178612
  - Allow wg load kernel modules, search debugfs dir
  Resolves: rhbz#2176487


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.10-1
changelog:
  - Add support for the passt_t domain
  Resolves: rhbz#2172268
  - Allow virtd_t and svirt_t work with passt
  Resolves: rhbz#2172268
  - Add new interfaces in the virt module
  Resolves: rhbz#2172268
  - Add passt interfaces defined conditionally
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1
changelog:
  - Allow passt manage qemu pid sock files
  Resolves: rhbz#2172268
  - Exclude passt.if from selinux-policy-devel
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1.1
changelog:
  - Allow dmidecode write to cloud-init tmp files
  Resolves: rhbz#2188391
  - Allow chronyd send a message to cloud-init over a datagram socket
  Resolves: rhbz#2188391
  - Allow cloud-init domain transition to insights-client domain
  Resolves: rhbz#2188391


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-2.3
changelog:
  - Allow insights-client get quotas of all filesystems
  Resolves: rhbz#2203797
  - Allow insights-client read unconfined service semaphores
  Resolves: rhbz#2203797
  - Allow insights-client work with teamdctl
  Resolves: rhbz#2203797
  - Allow insights-client read all sysctls
  Resolves: rhbz#2203797
  - Allow insights-client manage fsadm pid files
  Resolves: rhbz#2203797
  - Allow insights-client work with su and lpstat
  Resolves: rhbz#2203797
  - Allow insights-client tcp connect to all ports
  Resolves: rhbz#2203797
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.26-1
changelog:
  - Fix plugin exception reporting
  - Update translations
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Do not use Python slip package


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Jindrich Novy <jnovy@redhat.com> - 2:1.12.0-3
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179967
  - Resolves: #2187323
  - Resolves: #2187384
  - Resolves: #2203703
  - Resolves: #2207523


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.1-1
changelog:
  - new version 5.1
  - Resolves: #1990517 - Rebase squid to 5.1
  - Resolves: #1985231 - squid: FTBFS because of OpenSSL 3.0 preprocessor macro
    changes


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.2-1
changelog:
  - new version 5.2
  - Resolves: #1934560 - squid: out-of-bounds read in WCCP protocol
  - Resolves: #2011637 - Rebase squid to 5.2


author: Tomas Korbar <tkorbar@redhat.com> - 7:5.5-5
changelog:
  - Resolves: #2151188 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-4.1
changelog:
  - Resolves: RHEL-15431 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour [rhel-9.3.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-4.2
changelog:
  - Resolves: RHEL-19213 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9.3.0.z]
  - Resolves: RHEL-19993 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-9.3.0.z]


author: systemd maintenance team <systemd-maint@redhat.com> - 252-9
changelog:
  - Revert "user: delegate cpu controller, assign weights to user slices" (#2173996)
  - systemd: Support OOMPolicy in scope units (#2175619)
  - systemd: Default to OOMPolicy=continue for login session scopes (#2175619)
  - man: rework description of OOMPolicy= a bit (#2175619)
  - core,man: add missing integration of OOMPolicy= in scopes (#2175619)
  - meson: Store fuzz tests in structured way (#2175619)
  - meson: Generate fuzzer inputs with directives (#2175619)
  - oss-fuzz: include generated corpora in the final zip file (#2175619)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-13.1
changelog:
  - journal-def: fix type of signature to match the actual field in the Header structure (#2184929)
  - journal: use compound initialization for journal file Header structure (#2184929)
  - journald: fix log message (#2184929)
  - sd-journal: cache results of parsing environment variables (#2184929)
  - compress: introduce compression_supported() helper function (#2184929)
  - sd-journal: always use the compression algorithm specified in the header (#2184929)
  - sd-journal: allow to specify compression algorithm through env (#2184929)
  - test: add test case that journal file is created with the requested compression algorithm (#2184929)
  - ci: workflow for gathering metadata for source-git automation (#2184929)
  - ci: first part of the source-git automation - commit linter (#2184929)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-14.1
changelog:
  - Bump version to 252-14.1 to make sure that NEVRA is higher than systemd-252-14.el9.rhaos4.13 (#2184929)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-14.2
changelog:
  - elf-util: discard PT_LOAD segment early based on the start address. (#2222259)
  - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2222259)


author: Neal Gompa <ngompa13@gmail.com> - 2.1.fb49-7
changelog:
  - Use correct Python macros to build the package
  - Fix file list and install COPYING as license file
  - Don't compress manpages in build phase, as rpm auto-compresses manpages


author: Matt Coleman <matt@datto.com> - 2.1.53-1
changelog:
  - New upstream version
  - Add the upstream project's targetclid systemd unit files
  - Add proposed upstream patch:
    + Do not install systemd files in setup.py
    + https://github.com/open-iscsi/targetcli-fb/pull/176


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-14
changelog:
  - SELinux improvements
    Resolves: bz#1961488

  - Fix endianness issue on s390x
    Resolves: bz#1963029


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-5.2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
    Resolves: bz#2180308


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-11.1
changelog:
  - Resolves: RHEL-12550 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  - Update source to include the CVE fix
  - Update patch command


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-2
changelog:
  - Fix FAT mkfs with dosfstools >= 4.2
  - udiskslinuxdriveata: Use GTask to apply configuration in a thread
  - Limit allowed module names
  - 80-udisks2.rules: Ignore Apple boot partition from livecd-tools


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-3.1
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25642
  - Resolves: RHEL-25670


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-11
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak when connection to dbus is broken
  Resolves: rhbz#2059068


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-12
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2097419
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2042345
  - Add missing files to documentation
  Resolves: rhbz#2122107
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2122109
  - Remove build for i686 arch
  Resolves: rhbz#2126622


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-15
changelog:
  - Disable logging to console, logging to syslog is still enabled
  Resolves: rhbz#2122109
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  Resolves: rhbz#2155910


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-8
changelog:
  - Add gdbserver_tests-update-filters-for-newer-glibc-gdb.patch
  - Add helgrind-and-drd-suppression-libc-and-libpthread.patch
  - Remove valgrind-3.9.0-helgrind-race-supp.patch
  - Enable run_full_regtest.


author: Tomas Korbar <tkorbar@redhat.com> - 6.6.2-3.1
changelog:
  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - Resolves: RHEL-12816


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028342 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-9.0]


